ed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="09637eddeb"], 0xfdef) 05:57:37 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x60}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0xffffff7f00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'vxcan1\x00', 0x3}, 0x18) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r2, &(0x7f0000000040)='S:', 0x2) 05:57:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) [ 916.531772][T21716] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 05:57:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000000), 0x10) 05:57:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:37 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) [ 916.604288][T21723] device nr0 entered promiscuous mode 05:57:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0xffffffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000000), 0x10) 05:57:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:37 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x80, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5ef, @loopback}, 0x1c) r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000002c0)={0x16, 0x2, 0x5}) write(r1, &(0x7f0000000040)='S:', 0x2) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4400, 0x0) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000001c0)={0x8, @output={0x1000, 0x1, {0x0, 0x3ff}, 0x3, 0x4}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 05:57:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0xfffffffffffff000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x3de}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000000), 0x10) 05:57:37 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:37 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000), 0x10) 05:57:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000, &(0x7f0000000340)="0adc08003c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000400), &(0x7f0000000380)=0x60, 0x800) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x100) getpeername$unix(r3, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000300)={0x7, 0x6, 0x2, 0x80000001, 0x0, 0x1800000000000000, 0x5062}) write(r1, &(0x7f0000000040)='S:', 0x2) open(&(0x7f00000000c0)='./file0\x00', 0x202400, 0x88) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000000)=0xfff, &(0x7f0000000140)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1050, r1, 0x0) accept$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000200)=0x1c) 05:57:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006369a06e"], 0xfdef) 05:57:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xe00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000), 0x10) 05:57:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@alg={0xf8, 0x10, 0x4, 0x70bd28, 0x25dfdbfb, {{'xts-camellia-aesni\x00'}, [], [], 0x400, 0x400}, [{0x8, 0x1, 0xfffffffffffff118}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x8000}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x800) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4000020004e20, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/exec\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)='S:', 0x2) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000300)={0xb, {0x3, 0x0, 0x6, 0x9}}) 05:57:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:38 executing program 3: rt_sigreturn() r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000), 0x10) 05:57:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x10000, 0x123140) dup2(0xffffffffffffff9c, r2) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)={0x1, 0x7b, "cd5a07d9a096735ad3990f74d60ce22d86608cb9df1ee935a0f9c7df6f5b6db86e4800d97eb62cd061014bc032a3b3567bf7601c6eafb84d0955fe35201f71f7403e8f872641fae3435666b03346d7725e48a314173e163427a87db0eb2e16e8029fd75965841fae0108a0e4f77866415b21094a0d5f8e6d4c4b29"}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="006386ddeb07c6bed41713826aa16d5b451b753076f36277a5dcbfbc2c991e406ce1dff831748dfcaa1a89f400e6dfead2053d494f138b6db2918282ad86964a1831e2e56e6b7267d51369f7c2a9bd4dbafbf2fdb61933cc777cb0f157ba8b74d2a09aaed879fe6d58068a259e6b33a3c218aa1c6ca8dc4844c3d9be6057c85876"], 0xfdef) 05:57:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xa}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:38 executing program 3: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$getsig(0x4202, r0, 0x7f, &(0x7f00000001c0)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/176, 0xb0}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/169, 0xa9}, {&(0x7f0000001580)=""/187, 0xbb}, {&(0x7f0000001640)=""/202, 0xca}], 0x6, &(0x7f0000001740)=""/59, 0x3b}, 0x10000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x38002, 0x0) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000140)=0x7f) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x404000) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f00000000c0)={0x5, "d7f4e0b0f0a1500d92c93fd910769209cc1dc908abe3c118e36b449e2aed1c87", 0x2, 0x1}) r5 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r5, &(0x7f0000000040)='S:', 0x2) getgid() [ 917.979929][T22248] device nr0 entered promiscuous mode 05:57:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0xfffffffffffffeff) fstatfs(r2, &(0x7f00000001c0)=""/231) write(r1, &(0x7f00000000c0)='S:', 0x2) 05:57:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x6000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xe}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xde03}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 918.432193][T22248] device nr0 entered promiscuous mode 05:57:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8102, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 05:57:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xf}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890e, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000029c0)='/proc/capi/capi20ncci\x00', 0x402, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000002a00)={0x0, 0x0, 0x5}, &(0x7f0000002a40)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000002a80)={r2, 0x1}, &(0x7f0000002ac0)=0x8) r3 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180)=0x80, 0x4) semget(0x2, 0x7, 0x200) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) getegid() stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) getegid() getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x4f}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000014c0)={r4, 0x8d9}, &(0x7f0000001500)=0x8) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x7, 0xd0d40) ioctl$TIOCGPTPEER(r5, 0x5441, 0x1) ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x80000000}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={r6, @in={{0x2, 0x4e23, @rand_addr=0x8000}}, 0xfffffffffffffffa, 0x4, 0x0, 0x3, 0x5}, &(0x7f00000003c0)=0x98) r7 = shmget$private(0x0, 0x5000, 0x20, &(0x7f0000ffa000/0x5000)=nil) shmctl$SHM_INFO(r7, 0xe, &(0x7f00000004c0)=""/4096) write(r3, &(0x7f0000000040)='S:', 0x2) 05:57:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ptrace$getenv(0x4201, r2, 0xfbbf, &(0x7f00000000c0)) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x60}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x30000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) [ 918.668375][T22406] device nr0 entered promiscuous mode 05:57:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x3, @local}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xf0}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) ioctl$void(r0, 0x5451) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:39 executing program 1: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x300}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:39 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x82000, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x1, 0x8000) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r2, &(0x7f0000000040)='S:', 0x2) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x55, 0x8001, 0xa0d, {0x1f, 0x99a}, {0x4, 0x8}, @const={0x100000000, {0x1, 0x10000, 0x4, 0x2}}}) [ 919.184437][T22554] device nr0 entered promiscuous mode 05:57:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) [ 919.593354][T22554] device nr0 entered promiscuous mode 05:57:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'nr0\x01\x00', 0x4000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) set_robust_list(&(0x7f0000000200)={&(0x7f0000000140)={&(0x7f0000000040)}, 0xfffffffffffff46e, &(0x7f00000001c0)={&(0x7f0000000180)}}, 0x18) 05:57:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xa00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:40 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:40 executing program 1: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:40 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xe00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x4000400000000000, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000100)=0x1) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000080)) 05:57:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='/dev/net/tun\x00') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:40 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:57:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xf00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r0, &(0x7f0000000000), 0x10) 05:57:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x400, 0x0) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:40 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r0, &(0x7f0000000000), 0x10) 05:57:40 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x2}}}], 0x30) 05:57:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x1054}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x123, 0x4) getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000780)=0xe8) getresuid(&(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x4, 0x4, &(0x7f0000000400)=[{&(0x7f00000001c0)="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", 0xfc, 0x5}, {&(0x7f00000002c0)="253dbe1f459a33e09d1b48420312610f92474f3e4409de8077dd39200f18eed45a6913865e86a3d7b2723763700218ad8d73b07624c6490d11bdc666dbf929c5095645ad43", 0x45, 0x6}, {&(0x7f0000000340)="9e2eb7d90b90aee141f6d7342574d53f9153debcd2841b9a075ac1bd266568f7771b90c728d2e5356cb54a316d5eaef8dad2217ed98d603284f4c6025077135e0bf65443eb7fe66ac6d67e19393fc7ed7023842a3cecd716f1dd9eb5b23d804eabd9f8e50bcf83665d47b4c16b6bbc72a4e844bd3b3ab77b6a6f92c719bdc19ecf627adecf1acf841deadf12ebe84d91cc77ece17f88fcc869bd15390d802dbdfc56f7", 0xa3, 0xb75}, {&(0x7f00000004c0)="db92f8a15eba73b384b4004ecc60c1b59501e288206d9e5b81dc0406cf19ebe6d9d66679a3f09237b10bc77a7419abd353375112b2f597263df24455c20d9738d0754edfe0750891bf2a3386bbb9afa2938f530d1508fdc2d6a576e4b97b978bfb905ac9b0c693ea56ccb6c13f0c21606cdd4080cd383a281681a2afec02befa25b0fed2dae870ab99e968ed779529d253ce2526367afa93f5abe9f320c701af60633feab62161052bc024d7e36247841e657d22fb7ef95e7da78d41fdc089d0f723a2394b3fa98e8504f1c33ae39116d7a584e9804093b275e50a8fe88616744c9cdb51020022ba", 0xe8, 0x4}], 0x0, &(0x7f0000000880)={[{@data_ordered='data=ordered'}, {@nobarrier='nobarrier'}], [{@dont_hash='dont_hash'}, {@subj_role={'subj_role', 0x3d, '{\'userem0wlan0(-'}}, {@dont_appraise='dont_appraise'}, {@measure='measure'}, {@euid_lt={'euid<', r2}}, {@fowner_gt={'fowner>', r3}}, {@euid_gt={'euid>', r4}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, ',bdev['}}]}) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cachefiles\x00', 0x24100, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000009c0)={r1}) ioctl$sock_inet_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f00000000c0)) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:41 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r0, &(0x7f0000000000), 0x10) 05:57:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="64d98d83"], 0xfdef) 05:57:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x3}}}], 0x30) 05:57:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4040014) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x3f00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x5410}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x4}}}], 0x30) 05:57:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x400000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = dup3(r0, r1, 0x80000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x3c}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x1) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x6000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x5}}}], 0x30) 05:57:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400002000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f00000000c0)='S:', 0x2) 05:57:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x8}}}], 0x30) 05:57:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xf000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x802) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x2) 05:57:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x80) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x9) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 921.209423][T23445] device nr0 entered promiscuous mode 05:57:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x42}}}], 0x30) 05:57:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x30000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x34000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xbf}}}], 0x30) [ 921.720432][T23445] device nr0 entered promiscuous mode 05:57:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x10001, 0x0) accept4$bt_l2cap(r1, 0x0, &(0x7f00000001c0), 0x800) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200)=0x5e50, 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000140)={0x4c}, 0x4) 05:57:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xde030000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x400300}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x300}}}], 0x30) 05:57:42 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000040)='S:', 0x2) 05:57:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x500}}}], 0x30) [ 921.945398][T23594] device nr0 entered promiscuous mode 05:57:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80000000, &(0x7f0000000000)="0adc1f123c123f9ea04f06") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000140)=0x100000001) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f00000000c0)=0x8) ioctl$VIDIOC_G_PRIORITY(r3, 0x80045643, 0x0) 05:57:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xf0ffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000140)={0x401, 0x0, [], {0x0, @reserved}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x4200}}}], 0x30) 05:57:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x1000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:42 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="20000000fb002464e17b2b84d09a1ec07d861e2a522a4dc372e2c8d397d024c936a55e0c"], &(0x7f0000000540)=0x28) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000300)={r1, 0x7cb}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e22, 0x81, @loopback, 0x94}}, [0x5, 0x4, 0x6, 0xb2, 0x1, 0xf8e, 0x1f, 0x1, 0x7, 0x5, 0x63a, 0x4, 0x41f, 0x2, 0xfffffffffffeffff]}, &(0x7f00000004c0)=0x100) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x11f, 0x4) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0xa0302, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e24, 0x2, @loopback}}, [0x100000000, 0x5, 0x3fe000000, 0x9e5f, 0x10001, 0x7, 0x2e, 0x800, 0x4e3d, 0x0, 0x7f, 0x7ff, 0xffff, 0x4, 0x9]}, &(0x7f0000000140)=0x100) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r4, &(0x7f0000000040)='S:', 0x2) 05:57:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x2000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@int=0x1, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:43 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xbf00}}}], 0x30) 05:57:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) [ 922.507514][T23831] device nr0 entered promiscuous mode 05:57:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x3000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 922.843959][T23831] device nr0 entered promiscuous mode 05:57:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x00'/410) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x4000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:43 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x1000000}}}], 0x30) 05:57:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfffffffffffffffe}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e23, 0x101, @dev={0xfe, 0x80, [], 0x1d}, 0x7a0}}, 0x1, 0x1d22ebd8800000, 0x100000000, 0xffffffff80000001, 0x54}, &(0x7f0000000240)=0x98) 05:57:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xa000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x3000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x123, 0x4) r2 = dup(r0) ioctl$VT_DISALLOCATE(r2, 0x5608) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:43 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x2000000}}}], 0x30) 05:57:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x7, 0x3b}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xe000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:43 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x3000000}}}], 0x30) 05:57:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c0000319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1500, 0x33, 0x1, 0x70bd2b, 0x25dfdbff, {0x20}, [@generic="786b35fc8488c1ff91524613605ca470e03606e63fdde01e0e500214f88d0056ecf403f48e62b3c0fc0e0062e7286c5ee37c93fdcd13a3c6e7c7aa02017e22ec0a97ad2944cb0dfd65fa15c671f2ac4479a1aaca1f105f9e688cffa6d59490d0cc23f39aa73b7ee09bc3327f0cee8512a86aeeb8172793454301d25d1d549a98a49f085ccb7fb8318a02bcda2c208438b32e25c2b45052a2b4f2214a4e50f89ce5a288", @typed={0x14, 0x1b, @ipv6=@remote}, @nested={0xdc, 0x1c, [@typed={0x8, 0x4f, @fd=r0}, @generic="6605fc0c983b01c4de57cbe65977bf85d93553bd22a781319786ec3c471bc8ef5ecf7c2c96e7fb709689e69d51fdbf41871cb1002e1ad7a82c208760efe5021af57f1cbb889561a7b41cb4f9f42a49ea26a01b95318c2cc1fb975778f63d943bf8fe3920c50cf466701e2d4a5c0d3b40b9092baecab1887865bb062070c736bb339ec60b2c8b7e2d03f38628582baf63f66027b2bf87a82cc644149e6be1707e1d4ac4d39c516feddec7e8cafb8447d528c0e462209594cf990fde0fd90d5391f7f82a7aee536bc89e689a487c"]}, @generic="af9ebb7174c3ded964f76aa10292b3a0093ff7a01bbd94ca", @generic="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", @generic="27f3c2c409a37d13883f0fdf683305c8aff6396d9e6f8f2927eb3468db618466811c91c6e5893a4092a7c621434b2559d0f1c541668d4a21bee7482bcebe9bbb4ae5fc0946e225728e7083e5b16db039236a842384d87bbe4865cdb7ec011cef5b1f0b59a5942ec34bbbe9d4184fd8606a43837085f576c89bc88496fbeaaf", @generic="ac1f7953375bbe919afeaefc9a0fe4b1e53cf08d27ad21d0d3c5cee82b945e1a4801d7630d20c22e87fae06c19bffa11a8359ffbcd586a8096d7e6649c0ff8d26975809cae3ddc265e3f9d6d1e35001c22be23f46a727712e0918604ba9d6129b88755538ecc5c9f", @nested={0xe8, 0x3f, [@typed={0xc, 0x47, @str='cpuset\x00'}, @typed={0x8, 0x28, @uid=r3}, @generic="19fec745ddee6cb44297d73af0a37b1514b8e6ab00f457df2a09b471202a1f42a7d18f8488d167d7e6f38364ad75158e606b05815eb3f60decf5e3b7e0e9eeace8fb511bc8274ec7200d0c78811fa3ba7b16d089cd9f1c0596cf2b9a5d7a67c6f12b443a019ca3ee9fd2f12518d1e88d68423ecc055f68d3c768620a7bcbef05ac", @typed={0x4c, 0x4, @binary="9a58d5ad286e698f6ae49d014cb36dda78dcc8f02144fa138a77b9f2eb5171968d56ace82048db29ebe5afdf99d2073721346bc066a35c81487e4adca2962fab95d2393af5"}]}, @generic="ab362f718048b6d1f49b0fd5c3780fba238865f2c5ef66116ba255b02b387d1e2ea913c2301f428728a60cd80cadcd28f2ef633706321bbc4fe35a269f59de70c9c9f8c555599f7d770d64e7cbc75022a67f0c506ed8c073d7b7833c2a3c5e64b342c82a35c99f2c82b3743080665c182e", @nested={0x100, 0x4f, [@generic="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"]}]}, 0x1500}, 0x1, 0x0, 0x0, 0x40}, 0x8000) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x4000000}}}], 0x30) 05:57:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x400000, 0x4) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000140)={0x80, 0x20, &(0x7f00000001c0)="2679c74b47a1593329de5c5ee5e9168e0f0b5dc5ee1b8806242c965925fa74d17c672167d0c77d3fb82f1ffaf9ed6b5bddc6269977843d67734d6489a27c63717318bfdb16fef3ffba019816c571", {0x4, 0x8, 0x795f5f5b, 0x6, 0x100000001, 0x7fffffff, 0x7, 0x8}}) getsockopt$packet_int(r2, 0x107, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 05:57:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xf000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 923.482384][T24104] device nr0 entered promiscuous mode 05:57:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x5000000}}}], 0x30) [ 923.879852][T24104] device nr0 entered promiscuous mode 05:57:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$netlink(0x10, 0x3, 0x16) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x84, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x3f000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x8000000}}}], 0x30) 05:57:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x800, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fcntl$getown(r1, 0x9) sendmsg$netlink(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)={0x5a0, 0x11, 0x4, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0x60, @ipv4=@multicast1}, @generic="e57d07b16d11dbd2120ca2d0362feeaea632da8cf1b00af01aad5139776d16c02fb07f9d8422c87b94e57c35fe4758af2ca9eabdf39faeb66189d5b08f523a1e54809a159157f183590647f632e134bf8a09b0402025284cc2a77dbeb56d3f35b4aaecf7bdf21e1d4377ad5ddf12d08e343324189fef2037bf0d7644b9e2e7a39739e68207c44f9f6462899905c6af91e7d16e666cf21a3505f5169efc83a8a1613165d26cdfba4b3e89a8bfd3d378c369fa8fce6056e175e9eb1f583b04b32c6ce399a569fd03a9d46a0da701db0929db647a08ea0f9f7095f95d6b123753a95ebf456ba99aeffb1133a7222db40a6be94c16da", @typed={0x8, 0x2e, @uid=r3}, @nested={0x140, 0x90, [@generic="8b469490ecf9e5d73f017a9a7fefc5ee2dffff20dfff4595839d8f976aab6729220be6d69d37277f591f053456d72166213bff6a60284ab3a18fa5c7ee5b0d285698c4eb8617c555ab1d9064", @generic="a9f2724fcdffe678e2", @generic="383c728903daf6995981e60545754e32264cc101f4a5c6", @generic="b2129f5192df5baeefdfdb40b530a2abfe4a4c9f2815d20d57d6ecf66c901eb18e2aef8a6f79ebca0932f9e311250eda463877131ab1999e5ce17ecc36d3a345ff8c6783c9af1c720883e18ca423fe9cc099dcdec957a25e2c404210b7614d147a2a6aa53687c95934e012c8f720f85d200392f6b223abdf25230088b964b912c047b94873d839d1f66deb8cd61e9530eead81c5e8a149415a0b028c8f2572e0f3bcc776a0aacfbf35b94a9d456274a220b1c52de13924dfed3fb365f6", @generic="9b99c6f043b6da4a46ef785c5feb26f2627d"]}, @nested={0x198, 0x36, [@generic="7396fe93b9958bda0b3e0af3f6969ba27c3fe8ac37b1592eafd767edf12787fcbe15ed67633b43bda7e252f5abbfe745745df94788c22ea3cdfdb02f89f56d97a7b3fcb245407f805dd55c1608160d1c95dce0580be8a4f8afae9f74f62ab6d530425251f39556", @generic="ced281f91ebc570b635275d02165b153b3acee05e850f4c363ff4932e1a579e9892f9ba6ae02d197520a90c96629de282b8a99b37fa7b26b36e7c9c366c92ae7", @typed={0x8, 0x45, @pid=r4}, @typed={0x10, 0xe, @str='.eth1^[(/#\x00'}, @generic="d6c7d3f3e1eba40e2b0319225bcdaee5575f51b1176058bc2596156889c1ef275aa8219df42b3dff89b8ee052bf76090e36af99706758b2ed0e223969bc35c3f2d42bb4ee8c61a82cf1714336dd25c4c14e6bc5a49f1fdb9735ccdfae6afd58644fb2a51d46bbc59be58e08d31832ecac208f05e0fe41ef066c0fa895dea94c2593acc81bc", @generic="2977d0204f2eb229579769e4894c3702d0c727bfc55415bd75f2c76300c15f42", @generic="bb19f3a0c2ad4be85bf77786405f1c91133f2182257df91b39e014a8325d837dc4a4b68cb26f5edcde1763c944f659"]}, @generic="82e0d92f666269a568990c29961cb8798876880277da1eda4350f765e8e5cb4ee9430f3244f65e61784c870f91421d132f927e89", @generic="178dcbca322c8cd38715e06e2d11a7c48951324f2a1122eb871ef1ded5db6d093f3e6d980a8b447d2b9ed8534dabe19941d534c0e81a7f68f90f667df1f36f9c880ca508c2827c0accf8e5f8e5dbd70011233b43a9ecb82de60ca13704d200371b6e1828bc7def4700c881c1845894cb694eef12e7fd5b9d069cd241fa0a93fb319398d91251", @generic, @generic="8c92da268c6b9e2dae8fae6c34224e5c4637206a31fe718fcc87", @nested={0xe0, 0x65, [@generic="ccd49d487629aea91b02da31669e14e88eb41d28873952f5e709dea605b503c958319cc5f0773e813fe5334e0087c71af81c46fb2f7f6cac3dec75d135597f98c3cc80920c97e79ce53b4da0fcab203d8aa3d721c211eacf7f6679484dce88b0fea2a57f248c6b6f61b7de4ecc06f4eb8ef7e7df3e67acc54f878cda295f0ffb0a63136d1f78e0acc0a7b2a475858f8c9404b33b0d0eb79d57953d44c5e651882d1bd10cdca5d8d87add3d57368cef606ae061d9be5542ee", @typed={0x8, 0xd, @fd=r1}, @typed={0xc, 0x1b, @u64=0x4}, @typed={0x10, 0x54, @str='\'!!-}proc\x00'}]}]}, 0x5a0}], 0x1, 0x0, 0x0, 0x4000}, 0x40) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x8000) ioctl$KVM_SMI(r5, 0xaeb7) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x42000000}}}], 0x30) 05:57:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x54100000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/psched\x00') ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f00000000c0)=[0x0, 0x5]) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000100)) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)=[0x457f, 0x1]) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) write(r0, &(0x7f0000000280)="000000eafffffbffffffff00d7241b8feb7a4213fe004ec0ed4f3be744b036ab5d9a20329fd07f000000000316483922e72fd51fa6034b00", 0xfea5) [ 924.172088][T24242] device nr0 entered promiscuous mode 05:57:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x80ffffff}}}], 0x30) 05:57:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000001c0)={0xffffffffffffff9c}) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="eee4e31b79f8f584c98739583237c6465b19e323917b27f42b355d6a01a5b6535c6bdc46a23519d6c9220ccf722023a50b288f4fdbe22ea0bcff56167a1be6675fd5d7d6e88292fb1f", 0x49) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) write$apparmor_exec(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="65789664b9b84acc0086fbdd906563207b00"], 0x7) 05:57:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x60000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:45 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x81ffffff}}}], 0x30) 05:57:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) read(r0, &(0x7f0000000080)=""/70, 0x46) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000100)={0x4, 0x2}) write(r1, &(0x7f0000000040)='S:', 0x2) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x200) 05:57:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x9effffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:45 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x92ffffff}}}], 0x30) 05:57:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5, 0x181180) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e21, 0x6, @loopback, 0xe7dc}, 0x1c) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) write$P9_RSTATu(r2, &(0x7f0000000380)={0xa6, 0x7d, 0x1, {{0x0, 0x74, 0x4, 0x3, {0x80, 0x4, 0x2}, 0x22000000, 0x0, 0x6b, 0x4882847a, 0x2c, '@vmnet1securityppp1\\keyringmime_typebdevproc', 0x5, 'wlan0', 0x10, 'posix_acl_access'}, 0x1d, 'ppp0ppp1+*systemkeyringvmnet1', r3, r4, r5}}, 0xa6) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000500)={0x6, @vbi={0xffffffffffffff80, 0x7, 0x0, 0x31435750, [0xff, 0x6000000000000000], [0x4, 0xfffffffffffffffa], 0x13b}}) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000004c0)={0x1, 0x8001, 0x9}) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xe00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x0, 's\x86\xdd', 0xfdeb}]}, 0x5) 05:57:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xf0ffffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:45 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x93ffffff}}}], 0x30) 05:57:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='posix_acl_access\\%self\x00', 0xfffffffffffffffa) keyctl$get_security(0x11, r1, &(0x7f00000001c0)=""/213, 0xd5) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r2, &(0x7f0000000040)='S:', 0x2) 05:57:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xfffff000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 925.009445][T24408] device nr0 entered promiscuous mode 05:57:45 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x94ffffff}}}], 0x30) 05:57:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x3f00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xffffff7f}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:45 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xbf000000}}}], 0x30) 05:57:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x6000000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xffffff9e}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xfdffffff}}}], 0x30) 05:57:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x14800, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x53f999c8, 0x3, 0x1, 0x0, 0x1}, 0x8) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000c, 0x10, r2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000100)={'bcsh0\x00', 0xfffffffffffffff7}) 05:57:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xde03000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xfeffffff}}}], 0x30) 05:57:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f00000000c0)) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000200)={0x6, 0x4fbedd64, 0xd86, 0xe96, 0x8}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[r2, r1, r2, r1, r1, r2, r1], 0x7) write(r2, &(0x7f0000000040)='S:', 0x2) 05:57:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xfffffff0}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 925.695938][T24658] device nr0 entered promiscuous mode 05:57:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/158, 0x9e}], 0x1, &(0x7f0000000280)=""/47, 0x2f}, 0x2020) 05:57:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x3000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000240)=""/203, 0xcb}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/42, 0x2a}], 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xffffff80}}}], 0x30) 05:57:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xffffff81}}}], 0x30) 05:57:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 926.206334][T24792] device nr0 entered promiscuous mode 05:57:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x40030000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x200800) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 05:57:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x18000, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2, 0x0) accept4$x25(r2, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80000) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) write$binfmt_elf64(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="7f454c4603000148680300000000000003003e00fd000000000000004000000000000000e702000000000000080000000900380001000200010000000000000007000000f8ffffffffffffff01800000000000003f0000000000000004000000000000004000000000000000d90a0000000000001680146582653dccfd7fc38a366b47aab893a89cea6626010e7d4360356d3f993c873b53623bbe5a3fa082192d8917411265478ab195ee78e0bd4364bf2e0d08e767da55577af73ecd0243559bc9bdfaae028f3e0c1bfa9c112a72e6a439efcb4bd6820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009ea2ea9a2107059f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e94aa815e86dedc600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000802e8579854d15bedc5b628dabb458b2e569d9e036930d9b546742a54aa2972bb3106e1f25fd4522fef455d2a0af7bf45fcc39d84919e8051232a755127d00"/1064], 0x3e2) 05:57:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) set_tid_address(&(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x200000005, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xffffff92}}}], 0x30) 05:57:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x100000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xffffff93}}}], 0x30) 05:57:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bind$llc(r1, &(0x7f0000000000), 0x10) [ 927.222997][T24941] device nr0 entered promiscuous mode 05:57:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) r2 = semget(0x0, 0x3, 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000080)=[{0x1, 0x3, 0x1800}, {0x7, 0x2, 0x1800}, {0x3, 0x6, 0x800}], 0x3, &(0x7f0000000100)={r3, r4+10000000}) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x300000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) getgid() ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000100)="b1af3a", 0x3) 05:57:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xffffff94}}}], 0x30) 05:57:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x400000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xa00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000), 0x10) 05:57:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xfffffffd}}}], 0x30) [ 927.732234][T25310] device nr0 entered promiscuous mode 05:57:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x6, 0x8) prctl$PR_SET_ENDIAN(0x14, 0x3) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10800, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0)=0x80, 0x4) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x1) write$cgroup_subtree(r2, &(0x7f0000000180)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfffffffffffffe76) 05:57:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xfffffffe}}}], 0x30) 05:57:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000), 0x10) 05:57:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xe00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xe}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:48 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x81, 0x2000) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000001c0)={'batadv0\x00', {0x2, 0x4e22, @remote}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x40, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) getsockopt$inet6_int(r2, 0x29, 0xcf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r2, 0x1) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) write(r2, &(0x7f0000000040)='S:', 0x2) 05:57:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xf00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000), 0x10) 05:57:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x100000000000000}}}], 0x30) 05:57:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:48 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x400000000001, 0x400000002) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) write(r0, &(0x7f0000000040)='S:', 0x2) [ 928.280078][T25459] device nr0 entered promiscuous mode 05:57:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x3f00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000180)=0x8, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000140)={0x1, 0x24, 0x1, r2}) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, @default, @netrom={'nr', 0x0}, 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x60}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x200000000000000}}}], 0x30) 05:57:49 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x210000) write$9p(r0, &(0x7f00000000c0)="3d098b367094215e23c22a46960dda9af6d24a51f63fb65e6a5b75f31a8bb951b2bb606974751806784da4b47a21d275213ade6ffd2e550a7437b8fabdf9e0504b90bce9d7a7ed56c306db8a61d86d74e3b72f976c8d", 0x56) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f00000001c0)="446c476931465825bfd280b9b357439a557de79b01ec708a25bdf5dbb51751e0050000005847bb9ec0da6bb77f6602144d1f11f06083f029c0538093425d60da5ea6f9d625d2c4c75f861c6275ce795a7da82accc12997bc6aee891cf37b4da7ace5985e1d0ff78b1ef95930227d696207ffd79131cb621b2da22f48fa956c408718fd17a3ea2bc5c5d44880c81f163727757c65f793", 0x2f) 05:57:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, 0x0, 0x0) 05:57:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x5410000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, 0x0, 0x0) 05:57:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x300000000000000}}}], 0x30) 05:57:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x6000000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x200004e22, 0x7ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfff}, 0xfffffffffffffea9) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000180)={@empty, 0x0}, &(0x7f00000001c0)=0x14) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0100002000000325bd7000fbdbdf25ff000000ac1414aa000000000000000000000000000000c60000000000000000000000004e2100224e20007f0a0020a02f000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="f4000800ee0008000107e600be4e9b298dcc1ec1fc5171eeec14acba59564113ed020a2d74b544dfb446f1ce959a0b866798a7bb248fc764730012bd2b766173e0d6df701b5e613f54db16a68ae0d6f32e11cff077a7d9c208098533f3d951865183b6a25d3f13bac3e6381cfa6b5be4cf3e83469c8cd80917a067f6c67f2732913ff4cca3ff9a264276140b3f73afdcfd4c7d0147e3552a3bb10c7d635e17cdad40411c8f727790942f322462d7ab3507e6df9be8de0f7fdb78210bdf0bf78151b7e5c0e9b119ccb00cf259fbf93112baf96b9e7bebf330a5db8b806d39da88f8168ee500000000000010000a0029bd700027bd70000700"/265], 0x15c}, 0x1, 0x0, 0x0, 0x844}, 0x20000010) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x400000000000000}}}], 0x30) 05:57:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, 0x0, 0x0) 05:57:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x9effffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x3de}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x841) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @rand_addr="a80b0fae78ed5c65ef70462ef1f6ce13", 0xfffffffffffffff7}, @in6={0xa, 0x4e21, 0x8001, @local, 0x400}], 0x38) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r2, &(0x7f0000000040)='S:', 0x2) 05:57:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x500000000000000}}}], 0x30) 05:57:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x80000, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x280000, 0x0) r5 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x55b5167364e69ed2, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ubi_ctrl\x00', 0x0, 0x0) getresuid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) ioctl$SIOCAX25GETUID(r4, 0x89e0, &(0x7f0000000740)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r8}) r9 = syz_open_dev$midi(&(0x7f0000000840)='/dev/midi#\x00', 0x7, 0x40) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x54, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000) r10 = socket$inet6(0xa, 0x400000000001, 0x0) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000280)=0x123, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r10, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_DECODER_CMD(r11, 0xc0485660, &(0x7f0000000380)={0x0, 0x1, @stop_pts=0x4}) bind$alg(r11, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0xfffffffffffffebf) write(r10, &(0x7f0000000040)='S:', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) accept4$ax25(r11, &(0x7f00000002c0)={{0x3, @default}, [@netrom, @netrom, @default, @bcast, @rose, @bcast, @rose, @rose]}, &(0x7f0000000340)=0x48, 0x80800) sendto$x25(r11, &(0x7f00000001c0)="5097d2101e537abf98bb13b5852b0acc34c8c14b0b2676ff633db4a2d14d37f9cace722996cf8a15a5c6d2bf8164748678b68b4038288a0a3d4e34900fda36e74bbfd6d5032107ccb7a36fd101ec71d81abb59d681c6f77f13d3381e17d267aa083daa6192e867973c8a93d5749e129f4c762a8aade21569eb1262267161bb4015b542108cf339d507e033192b52ef", 0x5bb3a99f7959e9fc, 0x804, &(0x7f0000000140)={0x9, @null=' \x00'}, 0x12) ioctl$TCSETA(r11, 0x5406, &(0x7f0000000180)={0x3, 0x4000000, 0x3, 0x0, 0x4, 0x7, 0x4, 0x80, 0xffff, 0x5}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) [ 929.223292][T25739] device nr0 entered promiscuous mode 05:57:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xe00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 929.279459][T25749] device nr0 entered promiscuous mode 05:57:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x3ff, 0x2000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x17, "78b0e9bfde01e8c815923dde9908b1ad204d61e3b07e85"}, &(0x7f0000000240)=0x1f) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={r3, 0xf4, "0676c77602da31fc096c523231db47bba4c038b13a62304533c8b59859ac7890f60b60a25ebec85cd89e9f1f5204b664e0361f20c902a049f29b2d39236549e2d588f1da421bed4a87a01f765ceda7d1d43b6a5b08e502adc04f2773df092f5a1c66146815eaf94193c5d77074efa1882d34dee92f8f81b142b463cf286508e5eca0532f766b1912cd4f9b13ab5acdc22255fda70c8014814323022af503e33dbeebca05943cd0244f2e13c0280f54b33bfddc9d3facb26e3d800a41ff50729487c4733dad0a7fc589c73b88f6b0a1f282a75db5f50343adfaa02e17038782a5ff0cc6169433e4b6e14019377957fbf43cc3c75d"}, &(0x7f0000000280)=0xfc) 05:57:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x800000000000000}}}], 0x30) 05:57:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0xfffffffffffffffe) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)='+', 0x1}], 0x1}, 0xc100) writev(r2, &(0x7f0000000040)=[{&(0x7f0000001c80)="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", 0x553}], 0x1) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) timerfd_create(0x7, 0x800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:50 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) [ 929.655380][T25867] FAULT_INJECTION: forcing a failure. [ 929.655380][T25867] name failslab, interval 1, probability 0, space 0, times 0 [ 929.668551][T25867] CPU: 1 PID: 25867 Comm: syz-executor.1 Not tainted 5.1.0-rc7+ #96 [ 929.676536][T25867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 929.686598][T25867] Call Trace: [ 929.689903][T25867] dump_stack+0x172/0x1f0 [ 929.694253][T25867] should_fail.cold+0xa/0x15 [ 929.698856][T25867] ? fault_create_debugfs_attr+0x1e0/0x1e0 05:57:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x4200000000000000}}}], 0x30) [ 929.704671][T25867] ? llc_sap_find+0x167/0x250 [ 929.704711][T25867] __should_failslab+0x121/0x190 [ 929.704730][T25867] should_failslab+0x9/0x14 [ 929.718813][T25867] kmem_cache_alloc_trace+0x4b/0x760 [ 929.724101][T25867] ? lockdep_hardirqs_on+0x418/0x5d0 [ 929.729405][T25867] llc_sap_open+0x117/0x370 [ 929.734015][T25867] llc_ui_bind+0xa60/0xcc0 [ 929.738444][T25867] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 929.744087][T25867] ? llc_ui_connect+0xc00/0xc00 [ 929.748992][T25867] ? apparmor_socket_bind+0xb6/0x160 [ 929.754277][T25867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 929.754297][T25867] __sys_bind+0x23f/0x290 [ 929.754311][T25867] ? __sys_bind+0x23f/0x290 [ 929.754324][T25867] ? __ia32_sys_socketpair+0xf0/0xf0 [ 929.754342][T25867] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 929.769357][T25867] ? fput_many+0x12c/0x1a0 [ 929.769372][T25867] ? fput+0x1b/0x20 [ 929.769391][T25867] ? ksys_write+0x1f1/0x2d0 [ 929.780886][T25867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 929.780901][T25867] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 929.780919][T25867] ? do_syscall_64+0x26/0x610 [ 929.789097][T25867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.789112][T25867] ? do_syscall_64+0x26/0x610 [ 929.789135][T25867] __x64_sys_bind+0x73/0xb0 [ 929.799055][T25867] do_syscall_64+0x103/0x610 [ 929.799074][T25867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 929.799089][T25867] RIP: 0033:0x458da9 [ 929.809174][T25867] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 929.809182][T25867] RSP: 002b:00007fbe6abf0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 929.809196][T25867] RAX: ffffffffffffffda RBX: 00007fbe6abf0c90 RCX: 0000000000458da9 [ 929.809209][T25867] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000005 [ 929.819942][T25867] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 929.819951][T25867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbe6abf16d4 05:57:50 executing program 1 (fault-call:4 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xffffffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 929.819960][T25867] R13: 00000000004bee5c R14: 00000000004cfcc0 R15: 0000000000000004 05:57:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x80ffffff00000000}}}], 0x30) 05:57:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x6000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'veth0_to_team\x00', 0x3}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000300)={@empty, 0x60, r2}) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x81ffffff00000000}}}], 0x30) 05:57:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'nr0\x01\x00', 0x1c00}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101000, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000001c0)=0x1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="006386ee088f26e83fa553bcdbf1cf441ee3dc81a45d9d996e29f63d87482e56dea3bcf97a80dbebdbd151ce8cfffc718e1b408209ca815fdd2874555da81e91125472bcd3f6b269e5ea6693ee997feff4a4ecb7d7807681d08653d842c447d4357baf9438dc42fdce1fb3ec8b085e53d9010c0294dae8eadfb4fc0a6ff7bc5e9036013609281f7a182a9fe214180c8aae392afb8d9d52585ad3191dce8b29680ad2df71078f1c1965dbb2b3a3ad0c336b9cb4608b8b185a6dd36609519a3e5b251f91b104ef2f59525ab389dff9da17d3bf43227aa449"], 0xfdef) accept4$alg(r1, 0x0, 0x0, 0x80800) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000280)={0x53, 0x400, 0x0, {0x5, 0x3}, {0x9, 0x80000001}, @period={0x0, 0x0, 0x80000001, 0x5, 0x4, {0x2, 0x11, 0xa0f8, 0xffffffffffffffff}, 0x5, &(0x7f0000000200)=[0xa572, 0x1, 0x8, 0x0, 0x3809]}}) 05:57:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xde03}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x92ffffff00000000}}}], 0x30) 05:57:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x4, 0x40000}, [@nested={0x18, 0x0, [@typed={0x14, 0x9, @ipv6=@loopback={0x400000000040000}}]}]}, 0x2c}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r2, &(0x7f0000000080)="533ac8a6c055376e037b2a9a26", 0x194) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) write$UHID_DESTROY(r3, &(0x7f00000000c0), 0x4) 05:57:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000)={0x2}, 0x10) 05:57:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x30000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00638601000080e76c6a9fd401009401c7eb"], 0xfdef) 05:57:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:51 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x93ffffff00000000}}}], 0x30) 05:57:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1000, 0x2, [0x1c00000000000000, 0x5]}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x97, "b722029612f1d2d9afa5e3afb86f85d35c19d9f73f39e3956f3cf868c61af3907ead77031998e69db78b105dcd24fba16cb87087736c016832bf3fd9e921888fc91b4d31a21bd364d3d3e925d2958fff4e3ae20c802e1256f28bd4ce417fd2d12c287801032e0a771d884aafbfc8ea2db465b573599667784cad12c2ba065d99d548b1f6f286879dd2404d0df000831a6144b62891e1b7"}, &(0x7f0000000100)=0x9f) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000)={0xa}, 0x10) [ 930.574708][T26299] device nr0 entered promiscuous mode 05:57:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:51 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x94ffffff00000000}}}], 0x30) 05:57:51 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000040)='S:', 0x2) 05:57:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xa}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:51 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xbf00000000000000}}}], 0x30) [ 930.822765][T26397] Unknown ioctl 19584 05:57:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x240881) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x1f, 0x201e}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r2, &(0x7f0000000040)='S:', 0x2) 05:57:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="ff7f000044662470ab00000000ea3ada674654cae7ddeb"], 0xfdef) 05:57:51 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xfdffffff00000000}}}], 0x30) 05:57:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xe}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x20000010) 05:57:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xf}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x195, 0x2) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) 05:57:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:51 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xfeffffff00000000}}}], 0x30) 05:57:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) fcntl$setown(r1, 0x8, r2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x60}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) r2 = open(&(0x7f0000000040)='./file0\x00', 0x280000, 0x4) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x4) 05:57:52 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0xffffffff00000000}}}], 0x30) 05:57:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000040)='S:', 0x2) 05:57:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xf0}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x56, 0x4, 0x80000001, "1a07bb3f97692d4603aa411b26bc9587", "b276fda45b3004e6a337e38beebe26aea61229aa3438e80b14c14dde986e582651993604e2478b29a971cd003a92641bbb5891797749845bf9375d43029feafa8d"}, 0x56, 0x1) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) bind$llc(r2, &(0x7f0000000000), 0x10) 05:57:52 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x2}}}], 0x30) [ 931.609207][T26825] device nr0 entered promiscuous mode 05:57:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x300}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e24, 0x1, @loopback}, 0x16) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) r2 = dup2(r0, r0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 05:57:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1080008912, &(0x7f00000001c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x400400) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) 05:57:52 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x3}}}], 0x30) 05:57:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xa00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) clone(0x140c00, &(0x7f0000000080)="46caf89d811fc64634ec600ce1b0aafad9b8f3795702d098eb64a709ca646d1eb4e4b9a7436f99b2b9a4bc7bdef4534c2fb8211fce4c72cff4b6df6bf83ec4cbdad280ae5b8422563b158dadebe154", &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="6799dc0619e2c6bd51d6d907ba7978a4668eb0d82410110bc1bc1d207baa0a8ba7") setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) 05:57:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:52 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x4}}}], 0x30) 05:57:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x1) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x8000}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x5, 0x4, 0x2800000000000000, 0x3ff, 0x8}, 0x10) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000100)=0x1aa4) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x1, 0x0, 0x1, 0x9}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000180)={0x0, r3}) bind$llc(r2, &(0x7f0000000000), 0x10) 05:57:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_ROPEN(r2, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0xa, 0x2, 0x7}, 0x80000000}}, 0x18) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xe00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x10001000008912, &(0x7f0000000000)="0adc1f123c123f31d07000") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r1, &(0x7f0000000040)='S:', 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x1, "66bd185a08de7669"}) 05:57:52 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x5}}}], 0x30) 05:57:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002386ddeb9c6c77dc6bc7f8ac25529004dd7dbca2e5ce69fcaf9337467690524f2a895220430a068ce3d641f8f47ea9a469df7a9ee945485ffae4bb3040474c620400f05bd962ec48e12bbd7582e5f62cf7345bd14311f03dcd3f2ebe6083ede94ae1f072185ba599a5e7dc091674e9139241e1683a453bca36f5d8a4f94a2a3d521c58659d7944f7be2656e82d54ec3de7de70165dc1924311a498d3050fe131c756ff12dc0070a2883f24de84404459800e1fd79fe93c498144d62b0417e0da9b8850738ba84c584afb5825a06676b8f222b1e31179169cd293ae50456fd3f843fc71a321bb4842f6e35a"], 0xfdef) 05:57:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xf00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x4, 0x40000}, [@nested={0x18, 0x0, [@typed={0x14, 0x9, @ipv6=@loopback={0x400000000040000}}]}]}, 0x2c}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x123, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write(r2, &(0x7f0000000080)="533ac8a6c055376e037b2a9a26", 0x194) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) write$UHID_DESTROY(r3, &(0x7f00000000c0), 0x4) 05:57:53 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x8}}}], 0x30) 05:57:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x1054}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="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") ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f00000010c0)) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:53 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x42}}}], 0x30) 05:57:53 executing program 3: r0 = shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) [ 932.643952][T27402] device nr0 entered promiscuous mode 05:57:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:53 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x0) dup2(r0, r1) 05:57:53 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xbf}}}], 0x30) [ 933.092918][T27402] device nr0 entered promiscuous mode 05:57:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='\x00') write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000e0000947b88bc3ed3aa548a0a41011755950ab22bb701e189826b80dc1bbcaf02ba50b8480fd10f88d10d004ffaba9d317c2e8a143a47ad0b3dbc157a95588ffe3156fd09d96808faa3270a877440fdf37e0bfd9222f4567eec02b1654075877f54f14b64a032a9ddc3350309afb11d614243ce0d02d254e35e9cc613be54a3fcfcc02f8b3b165a2ac7a70a58d03cc7dcfc2d6c7a6a90fe86db8d84c3c65a049405e09f4b05756b79490e185fa88aad4bf54db8960513529915b84b6f8a8a2b7108b053a7c4bf0b851c79a64198f59c7d6617088224b1f00ee044bff84d22bb741b163818b4a185bf3e84ae623a7b2de093"], 0xfdef) 05:57:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x3f00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:53 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x300}}}], 0x30) 05:57:53 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xffffffffffffffff}) 05:57:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000500)=@generic={0x2, 0x1000, 0x6}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x141080, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f00000003c0)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000004c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000380), r3}}, 0x18) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x80000001, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xe4, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000}, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x692c}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x6}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e23, 0x200, @local, 0xfffffffffffffc00}, @in6={0xa, 0x4e20, 0x80, @local, 0x5}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x29, @mcast2, 0x101}, @in6={0xa, 0x4e20, 0x0, @mcast1, 0x401}]}, &(0x7f0000000200)=0x10) pwrite64(r1, &(0x7f0000000240)="abcb15bb9310d6cb233f160a362cff081e4d0c44eccce68735c91dbdb1b031c3f3efdca9a8eafe0703f1ea386e375a1aa6dc12dab671b1c3ca2c5eda8468c08649773b4d69b0ceb613c36c9e8e008f1b8ecbbf78b982be3dc7e9fed6ad7d9e1173b2e3469674086fb4fbba4ca230835c0a0b5abf5ba689317e9cfe8ac354dd7ae5d95b740392ece90f71cbba832e8a8aeeabf5879d7f8b1b5247dad74b9c55d35b5e832c026310e09e2e8774cf571c574a7576ab1870d6a7d25bf7d98119a582adca595cc525016edab73961982f1993f986914654ea8d08c1077e21ad5edfe551e9f627be6f1f", 0xe7, 0x51) 05:57:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x5410}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xde030000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:53 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x500}}}], 0x30) 05:57:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000100)={0x1, 0x9, 0x20, 0x100000001, 0x6, 0x8}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x1ff, @local, 0x7}, @in6={0xa, 0x4e21, 0x7, @mcast1, 0xaf5c}], 0x58) 05:57:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:53 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x6000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 933.591448][T27552] device lo entered promiscuous mode [ 933.729337][T27552] device lo left promiscuous mode 05:57:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x5100}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x7fff, 0x50081) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x80000, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000240)) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x80400, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2, 0x0) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000000180)={0x0, 0x9, 0x7f, [], &(0x7f0000000140)}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=r3], 0x1b) 05:57:54 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x4200}}}], 0x30) 05:57:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xf000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x5, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f00000000c0)={0x80, 0x534}) r2 = syz_init_net_socket$llc(0x1a, 0x8, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) 05:57:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:54 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xbf00}}}], 0x30) 05:57:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/68, 0x44) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x5) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) 05:57:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x30000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:54 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x1000000}}}], 0x30) 05:57:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x400800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000006c0)) chroot(&(0x7f0000000040)='./file0\x00') write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2d, 'pids'}, {0x2b, 'cpu'}, {0x2f, 'memory'}]}, 0x13) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000002, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x34000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:54 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x2000000}}}], 0x30) 05:57:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = dup(r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000040)=[{}, {}], 0x0, [{}]}, 0x88) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:54 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x400300}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x3000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 934.368655][T28242] device nr0 entered promiscuous mode 05:57:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 05:57:55 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x3000000}}}], 0x30) 05:57:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x20000000002, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) write$P9_RLERRORu(r2, &(0x7f0000001200)=ANY=[@ANYBLOB="130000000702000a66468993bafbdeb4ffffff00800000baf5740268a96f0e55e6ae535d830dce652e706210e349ce2b2c510a4e200bb040559a5e39bc2ca99e55efe6bd2082c2873c35aa505e14f216a7427bf25e26e0e382ca685ad6cfc6342839bc6627c788603e14d187a889681c1c535ad586f2f902c6a24e6ab517daf5a21e7a88fde8ccbb020000006395871dd0906d62e1cad4c08974bdb833b8e8a0bb30ac1695c38f335ad59c908a1ea89510d0b9879284aca65d"], 0x17) sendto$x25(r2, &(0x7f00000000c0)="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", 0xfffffc4a, 0x4, &(0x7f00000010c0)={0x9, @remote={[], 0x3}}, 0x12) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000001180)={0x1a, 0x0, 0x0, 0x80000005, 0x0, 0x0, @local}, 0x10) 05:57:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff93, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1, 0x0, 0xfffffffffffffec4}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x20000) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000140)={0xcc, ""/204}) socket$kcm(0x29, 0x107, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0034f81ca8"], 0xfdef) ioctl$sock_ifreq(r1, 0x891d, &(0x7f0000000240)={'team0\x00', @ifru_flags=0x400}) 05:57:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:55 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x4000000}}}], 0x30) [ 934.907700][T28414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:57:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) 05:57:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:55 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x282102, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xe080000}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)={0x80, r0, 0x800, 0x70bd29, 0x0, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1000, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}}}]}, @TIPC_NLA_NODE={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_execute_func(&(0x7f0000000480)="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") 05:57:55 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x5000000}}}], 0x30) 05:57:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) getresuid(&(0x7f00000002c0), &(0x7f00000006c0), &(0x7f0000000700)) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x42) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xe3}, &(0x7f0000000180)=0x8) setxattr$security_smack_entry(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64MMAP\x00', &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&', 0x19a, 0x3) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r2, 0x800}, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="007b926ca482d26613effba8b41615462f6386ddeb"], 0xfdef) 05:57:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:55 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x8000000}}}], 0x30) 05:57:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x4001, 0x0) write$UHID_DESTROY(r2, &(0x7f00000000c0), 0x4) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:55 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x42000000}}}], 0x30) 05:57:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:55 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 935.516755][T28731] device nr0 entered promiscuous mode 05:57:56 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) 05:57:56 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x80ffffff}}}], 0x30) 05:57:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = dup(r0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000080)={r1, 0x401, 0x4, "ca6d218f8d0fbae0a77263167262e84b2855ac74972e3e7628b850cf4c9988fb128303dd94f2a922a7802f3536bb524900d723d81ddaac79af04505a03e2156b50b3541220adb663c1e16621d9549d6f55e5d1a2d24f8f77ba6321a2352b68536a3ecdc3c61eb3428e6b8977eea6f1559fdcc370767c94341d2c8bec2797d50e9006dd56fd5a3438719055d1f1abb1e616c902a481f3f85595a99915dd2a7231fd2c23f1e90ed463dba222f00431d9b64696204e9375f1b0f66e8f3c35b42617bb43d0feef52603ae593d3bf16c59cee739441dbc9b97dcf82ecaaada365fddb930d49d820aae5c0f720030874"}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'cpu', 0xfdeb}]}, 0x5) 05:57:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xe00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xe000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:56 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x81ffffff}}}], 0x30) [ 936.075103][T28854] device nr0 entered promiscuous mode 05:57:56 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x103000, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f00000000c0)=0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) readlinkat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/91, 0x5b) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=0x1000) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x412) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001240)={'erspan0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}}) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) 05:57:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:56 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x92ffffff}}}], 0x30) 05:57:56 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) sendto$inet(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x80, 0x0, 0x0) 05:57:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xf000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:56 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x93ffffff}}}], 0x30) 05:57:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x3f00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x6000000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 936.682219][T28854] device nr0 entered promiscuous mode 05:57:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = fcntl$getown(r1, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) tgkill(r2, r3, 0x4) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x94ffffff}}}], 0x30) 05:57:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:57 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) 05:57:57 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xde03000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x54100000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xbf000000}}}], 0x30) 05:57:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40000, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000080), 0x80000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) [ 936.937217][T29151] device nr0 entered promiscuous mode 05:57:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x60000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3f, 0x63881309fbb5cfb7) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000140)={0xfff, 0xfff, 0x3cd}) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xfdffffff}}}], 0x30) 05:57:57 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:57:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='tunl0\x00', 0xffffffffffffff36) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xffffffffffeffffc, 0x0, 0x0, @random="b340c17a7c37"}, 0x10) [ 937.342952][ T26] audit: type=1326 audit(1556776677.821:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29448 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:57:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xfeffffff}}}], 0x30) 05:57:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 937.400670][T29464] device nr0 entered promiscuous mode 05:57:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080), 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x336, 0x0, 0x0, 0x0, 0x1}, 0x10) 05:57:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:58 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xffffff80}}}], 0x30) 05:57:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000180)="bec1bc9e92edd19d430cc3ccd2e5555b524d35c8dedb7bef2c370b338a89d15a4bbf0d292b3778868f5289379d4a7b7e703e9b20bbc93ada051181fc989e340114b53de477a9c65820378480883b5a64002323aa57a4c4bb43127f11f52c72b9cba4898dfdf85e7f4e21200ad8389f74da6a6d753ced5ece6c6e9b3d08fedb477bad12e4", 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:57:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 937.933734][T29786] device nr0 entered promiscuous mode [ 938.084575][T29786] device nr0 entered promiscuous mode [ 938.146725][ T26] audit: type=1326 audit(1556776678.614:44): auid=4294967295 uid=0 gid=3435461260 ses=4294967295 subj==unconfined pid=29448 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:57:58 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:57:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:58 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xffffff81}}}], 0x30) 05:57:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x400040, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x1, @ipv4={[], [], @loopback}, 0xfffffffffffffffa}}, [0x8, 0xfffffffffffffffa, 0x1588, 0x8, 0x6502b364, 0x7ff, 0x5, 0x2, 0x6, 0x9, 0x8896, 0xffffffff, 0xfb5, 0x1, 0x7fffffff]}, &(0x7f0000000340)=0x100) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)={r2, 0xdb, "2c95e6c13c518c028455cf9d364f7f3c8cc13bc526e66905400a7b417573b14c7de2c9215c2e53f2bb6b6e1b3bf94edd65d4fed872aecb672c9c8de5451df582e142fd35fafe4419fcee5b9d4c20ea86a19b85bb6bab00f82a306027898fb35d74fe24ab0e1d9873c6878d88ec3700b9162de608f6cfe6c7088d004f26a4d163c92c1266f654928b6a02602f38437dcbfcd65e0b2ed190dcc7397c24ae65091dff1455ccc169b246c083f71a5dc0ef3b171e99b7fafe12a609a574985425e9bdd160c2c9d1fa2c79a33a744db6e0017ad2c420eaf92723433e7a09"}, &(0x7f0000000480)=0xe3) ioctl(r0, 0x1000048912, &(0x7f0000000180)="0adc1f123c123f319bd070") r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40) r6 = inotify_add_watch(r1, &(0x7f00000004c0)='./file0\x00', 0x2000000) inotify_rm_watch(r5, r6) ioctl$CAPI_GET_PROFILE(r5, 0xc0404309, &(0x7f00000000c0)=0x20) bind$llc(r3, &(0x7f0000000000), 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000001c0)=0x51, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000100)=0x2) 05:57:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00631292154486ddeb"], 0xfdef) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000340)={{0x9, 0x4, 0x0, 0x3, 'syz0\x00', 0x9}, 0x2, 0x20000007, 0x2, r2, 0x9, 0x1f, 'syz1\x00', &(0x7f00000006c0)=['/dev/net/tun\x00', '\x00', 'nr0\x01\x00', '$$[eth0posix_acl_access\x00', '\x00', '\x00', '!/\\\x00', 'nbd\x00', 'nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&'], 0x1cf, [], [0xffff, 0x400, 0x3, 0x4]}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4840, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1100001}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x20}, 0x1, 0x0, 0x0, 0x40840}, 0x800) 05:57:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:58 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xffffff92}}}], 0x30) [ 938.270700][ T26] audit: type=1326 audit(1556776678.743:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29799 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:57:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x1f, 0x7, 0x3, 0x6835da23, 0x1, @dev={[], 0xf}}, 0x10) prctl$PR_SVE_GET_VL(0x33, 0x1161a) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580)='/dev/sequencer2\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000015c0)={0x0, 0x100}, &(0x7f0000001600)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000001640)={r3, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) bind$llc(r1, &(0x7f0000000000), 0x10) 05:57:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:58 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xffffff93}}}], 0x30) 05:57:59 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:57:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xde1c, 0x20040) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) 05:57:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00b2200000"], 0xfdef) 05:57:59 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xffffff94}}}], 0x30) 05:57:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xe}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:57:59 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xfffffffd}}}], 0x30) 05:57:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x3000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 939.131479][ T26] audit: type=1326 audit(1556776679.596:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29942 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 939.175294][T29946] device nr0 entered promiscuous mode 05:57:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x40030000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:57:59 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r0, &(0x7f0000000000), 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000600)=""/127, 0x7f}], 0x2}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x100000000, {0x1000, 0x6, 0x4b, 0x7ff}, 0x10000, 0x3}, 0xe) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000000c0)={0xb, 0x0, {0x57, 0xfffffffffffffe00, 0x1, {0x9}, {0x401, 0x8000}, @rumble={0x3, 0x5}}, {0x57, 0x7, 0x81, {0x6, 0x6}, {0x9, 0x1}, @rumble={0x6c29, 0x5}}}) 05:57:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:00 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:00 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xfffffffe}}}], 0x30) 05:58:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x60}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000003080)='attr/current\x00') ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00000030c0)={0xf5, 0x0, [0x3, 0x7, 0x80, 0xffffffff]}) r3 = syz_open_dev$vbi(&(0x7f0000002d40)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000002f00)={0x0, 0x91b9, 0x2, [0xffffffffbc020027, 0xfffffffffffffff9]}, &(0x7f0000002f40)=0xc) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000002f80)={r4, @in6={{0xa, 0x4e24, 0x0, @remote, 0x6}}, 0x2, 0x4, 0x101, 0x9fea, 0x24f}, &(0x7f0000003040)=0x98) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000002d80)={0x7, 0x4, [0x6, 0x8000, 0x80000000, 0xbfd, 0x6c04], 0x200}) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000002c40)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000002c80)={0x0, 0x5b7}, &(0x7f0000002cc0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000002d00)={r7, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000002dc0)={r7, 0x61}, &(0x7f0000002e00)=0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002c00)='/proc/self/net/pfkey\x00', 0x101200, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r5, &(0x7f0000000000), 0x10) recvmmsg(r5, &(0x7f0000002b00)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}}}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000000100)=""/133, 0x85}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/64, 0x40}, {&(0x7f0000001340)=""/159, 0x9f}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/16, 0x10}, {&(0x7f0000002440)=""/121, 0x79}], 0x9, &(0x7f0000002580)=""/105, 0x69}, 0x2}, {{&(0x7f0000002600)=@caif=@dbg, 0x80, &(0x7f0000002880)=[{&(0x7f0000002680)=""/251, 0xfb}, {&(0x7f0000002780)=""/182, 0xb6}, {&(0x7f0000002840)=""/59, 0x3b}], 0x3, &(0x7f00000028c0)=""/65, 0x41}, 0x5}, {{&(0x7f0000002940)=@ax25={{0x3, @bcast}, [@rose, @null, @default, @netrom, @netrom, @default, @null, @netrom]}, 0x80, &(0x7f0000002a80)=[{&(0x7f00000029c0)=""/185, 0xb9}], 0x1, &(0x7f0000002ac0)=""/15, 0xf}}], 0x3, 0x0, &(0x7f0000002bc0)) clock_gettime(0x0, &(0x7f0000002e40)={0x0, 0x0}) setitimer(0x1, &(0x7f0000002e80)={{}, {r8, r9/1000+30000}}, &(0x7f0000002ec0)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000003140), &(0x7f0000003180)=0x4) 05:58:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:58:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x2cc0, 0x8400) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8c000002}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000f40465640aa60af6033adbd90f392be8fdbf9b27d0fd055e32eae283eebb21e31b13f714b12d50a17ced925b3583968026334ea007190000000013cfa4284c", @ANYRES16=r3, @ANYBLOB="150427bd7000fbdbdf25120000001c000600040002000400020004000200080001000500000004000200"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20004001) bind$llc(r1, &(0x7f0000000000), 0x10) [ 939.999763][ T26] audit: type=1326 audit(1556776680.459:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30279 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:00 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x100000000000000}}}], 0x30) 05:58:00 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x80, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x6, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) pipe(&(0x7f00000000c0)) 05:58:01 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:01 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x200000000000000}}}], 0x30) 05:58:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') r2 = socket$kcm(0x29, 0x5, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 05:58:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socketpair(0x4, 0xa, 0xff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$netlink(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000080)) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x1) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x312, 0x0, 0x0, 0x0, 0x9}, 0x10) [ 940.841823][T30623] device nr0 entered promiscuous mode [ 940.853229][ T26] audit: type=1326 audit(1556776681.302:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30616 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:01 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x300000000000000}}}], 0x30) 05:58:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x3de}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:01 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x400000000000000}}}], 0x30) 05:58:02 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="470f52e94a2be93699980f053ef3aec4a37bf0c50241e2e9450fe36a09c462f1920cbcc4027d30ef420f5a1ea35500262ff3906646da4e329200d2dec461dc55b13e410f3809132525000e818f470f94c967450f289369000000b100673e66470f0fa21900000090853665f3490f2cf18fe97c810f69e08f4cbec5c4c2858c3f8f56388d2b0000000f01d4dfc5497dbfed304715156f2a37ad59438f34b267f36ab4c4c2e9adc2564105ba16f2ae263ef367650f0fb30080000094c4c29d962150386c6cb3f9b3f9491feefe8f08e4a25600b1500909660fdf530967410f58d1e289e2897474e4b6c1f0433e660feee4440f704eee9846dec43b7d0f12e400f4c4617be6d2c4017a7fc3c4c1225cf909912af3430f47bb00000000000045126d6d8450000000c44299deb76a5babb9c421f9e759003e65660f5cb54c0a0000dd4805c462a52b6e0b8fa810ecd6091a1af20fa576acffff65d085431fe720bd7c6d83004577cbf043806d040ef4b0f43ef3430faedf1002970606b2aa8fa8689fb900100002dac422e6912cb18374fb0a0766440fe5bf2c470000f247acc4a2dd910cb1ed36660f38058b976192361d09f4f5e5978847915e02c1045c0b47cc47cc5c389f9f060f0f2ef217640f28006c6c01a9bb000042d8fb4974ec0b31c422358c083422") execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:02 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x500000000000000}}}], 0x30) 05:58:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={r1, 0x10, &(0x7f00000010c0)={&(0x7f00000000c0)=""/4096, 0x1000}}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001140)='/dev/btrfs-control\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000011c0)=[@in6={0xa, 0x4e22, 0xa76, @local, 0xa2b1}], 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) write$FUSE_GETXATTR(r2, &(0x7f0000001180)={0x18, 0x0, 0x2, {0x2}}, 0x18) 05:58:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x0, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={r3, 0x1, 0x7, 0x8}, &(0x7f0000000340)=0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfff, 0x1) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000380), &(0x7f00000003c0)=0x10) syz_open_dev$sndctrl(&(0x7f0000000480)='/dev/snd/controlC#\x00', 0x2, 0x400) fsetxattr$security_smack_transmute(r0, &(0x7f0000000400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000440)='TRUE', 0x4, 0xba2ad5486bd8616c) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000140)={0xa, 0x4, 0x1, 0x1}, 0xa) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="006386ddeb2e431531599b8709432d012e15895a0264a05245c5e69539b7d10cbad5f1432626ac67ee6b11069487f3a2b513e03235517f6bcd54e25d4b66adb760d3c1638b43210da107650a83"], 0xfdef) 05:58:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xe00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 941.724921][ T26] audit: type=1326 audit(1556776682.165:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30963 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:02 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x800000000000000}}}], 0x30) 05:58:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006384ddeb"], 0xfdef) 05:58:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000080)=0x5, 0x4) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xfffffffffffffffd, 0x80000) bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x5, 0x61, 0xffff, "036b35fe9298c834ca41e032e07646822d538d067992ba865022287956a8e50f4f0cac85da1b5f54bf9332ac10583a866d063cb6a7e41e817a8bb4126c907f", 0x1a}, 0x60) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 941.925345][T31078] device nr0 entered promiscuous mode 05:58:02 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:02 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x4200000000000000}}}], 0x30) 05:58:02 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:02 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x9, 0x2, 0x4}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) 05:58:02 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x3) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3, 0x2400c0) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000006c0)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="94010000", @ANYRES16=r3, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400000, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x0) 05:58:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x6000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:03 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x80ffffff00000000}}}], 0x30) 05:58:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x5410000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 942.626741][T31294] device nr0 entered promiscuous mode [ 942.638273][ T26] audit: type=1326 audit(1556776683.077:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31300 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xde03}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="dc5d49d3b650638c2dc324e0dee6d65363490b367b2bb9d48477be5bb5185ecedccd8b47536b8da512e711cb961c990966faf33458bb749c97d0bf006efa327fbaf01613d2c035b81173eb27eb987d53af861092a96d5e6472335e8e77db8bbd9b7a6520018b70a87c9a7b90a7640ac233c30c9a9f70edf0436b3025e4124ccd7f389031deb4d3bab7f628c3c6de0a60c64f8dd25a10237b1c6c3c7532da76e476d389f6b5f0910ba32e6c9611578278747489790cd41675d9ccb2fb4c2bc2c0", 0xc0, 0x401}], 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000300)={0x13, 0x2, 0x340db141}) syncfs(r0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000), 0xc) 05:58:03 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x81ffffff00000000}}}], 0x30) [ 943.046021][T31294] device nr0 entered promiscuous mode 05:58:03 executing program 3: seccomp(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:03 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x92ffffff00000000}}}], 0x30) 05:58:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) add_key(&(0x7f0000000200)='dns_resolves\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000100)="034c1ea53e6840b2f28500c545fa03308cb7356e7179745b7e0000f5", 0x1c, 0xfffffffffffffff8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101800, 0x0) syz_mount_image$bfs(&(0x7f0000003840)='bfs\x00', &(0x7f0000003880)='./file0\x00', 0x9bb3, 0x8, &(0x7f0000003e00)=[{&(0x7f00000038c0)="0fa58d33d036bab9de61d9ad77e4deb9ff9ccb1fc921328da0c31e171f11040a951e5675ceab2a76ddcd978ba8fc42769400fba80db246bea6b6386dabac3b04da89d77a9c30ecb4a5498966a4d5eed94cef6d9c5b2acad3cfcc140aa1220c314e6c4c81a5f0302b2f4a37c12cc700b1789ffd25603064ef0a0042690cb76e775d93fa6f46d07ef4b47e6c5adfb7d59fb2e351fb669bf84af972f1b958d5", 0x9e, 0x3}, {&(0x7f0000003980)="45aef645aa5f97d41033618617cf321e145f3efaa0c0a6258766e48d1f4fc79c2fdaf62a3b5eecb33ae7083def17c1da2f2fb2b7ed1a2da757f28b13f7deacb9d509bd22a01b4f6256d0913a25a3b7aa4ead987981c18fdd036af261d71e932c0ca48b734d9b096afe7c6f031a687a2d729a10c3c3b35af53445bd3acb3fc3cab9a5c6e883a7d3dce5f39e2986d82d4ed840875c7c9793e3fe4cc805a189680850", 0xa1, 0x814e}, {&(0x7f0000003a40)="ce14978f5d4e8304f173cee1d74c2f000dae907435858af919fb3992ae26a9f3841026fce3af123578da9c8c5cb3a6cedca7963ed9daab6b3d", 0x39, 0x1}, {&(0x7f0000003a80)="cc2c6943bf09b451c6fd07c04c8f812c045e0f302298db3ecd86e4f6b7a58ccbc7bcca8d585e2de39ff691d3c6a04e0d0adc1a82b5c37508954a96b0a5b2e2568149a835c4ca7be132a3156be20b7f69c30da85043739e921f9d50fbd147b536fe3d8d30854ecb111bccc97c0b9fc18a225d4b7aaa83e74131e533", 0x7b, 0x6}, {&(0x7f0000003b00)="bf58648af6a8adef2c29006445843494b6140812d466d913e3db1a71d8975279c3a6d8f6fa77d371c40f12b7514e36ebf595ea5ca6ffe3d2599068ae51d29ac56eccbb649177e2709a2f4c9bc701e4cd49162de4de9eebb3c0904ccbcc2c77b2a7c3254e18311b4b96b9bcc749f9ded227598ce0cc038298ced247a7ca84b54984978061a3aa291b58fba7b917b217fc181de908921bf69bebe10c3bfc1d882f29e2ffefade5dff093164524f10d70b8ecf5bda395ee1066f6424b669d746d3b410a8db506de154cb80d0d38ac529c52c89ce94337d6c1ea78b51d", 0xdb, 0x8001}, {&(0x7f0000003c00)="6558eaf5500113571a55d843ec837630ae63e52c002b02226ef3a837bd89744b448e66b84b17da3dbcc3c92db6b682a0e8e25ce8d73466f07c065e63c469cbf62d020d30066fee114f8451278281c878124ad929415549385a08f985988d0e6b1e35dce63c4bf140cde5ffa769fa3f09009ae2e0ed09326604422e57675ad9f09738941ff87dca170b90f731576daba8f6eb0e013e34e2429f7648b712aeb609785fe781e497d7e830328d060725d6ed1d95c8b9574e", 0xb6, 0x3}, {&(0x7f0000003cc0)="9c22da7c61fdcde81ae11ae98d92bdb4b4dc19ebe6778e163c09c935180a5368ff2a367d327b6c199d11280e33b24616ec75ca3274fb0c19e84d45b4797e059588a69e95fdd3c9aac5449e", 0x4b, 0x3}, {&(0x7f0000003d40)="25f432dfcfeb08a79f22e212a3d144e2a3144d5977ffc6cb513079d0c3b9724ce953d9d8fd68f0cabc933e0d71627a80fe811b867253ba40e559401407b407dd6a884c9f5e2bd7b6a3484ec1de5708d094892d16a3a64df50ac27d6644ff4311f6ac4f1a0f3359b8ed6dcac0bfffce8435b1ad8a0f0aed6e77eb38d6e56b706cae57714c77fa13eea3af5d09", 0x8c, 0x2}], 0x801000, 0x0) r3 = geteuid() r4 = getpgid(0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4010100}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x355c, 0x19, 0x1, 0x70bd2a, 0x25dfdbfd, {0x1b}, [@generic="e80a6a12693db6c407bf2da56a0ac0c5ed818a99fbb3f7edfd424c9631d83f2322377ab4f4cbe77bb78e7ea035a11814de6eab30fa8aaf05412797db570380eaa729deff3e01f7f3996cd1d61a4c2aec437d", @nested={0x1270, 0x4f, [@typed={0xc, 0x61, @u64=0x7}, @typed={0x8, 0x52, @uid=r3}, @generic="dd91de8d3017810b53db6ad94f1fe9d0b443113fec6252e0f84edf3ee9c1380d2f7507cd05311c0bb771941cf8ef65c8e7df12747275d1c0cc319c94364be7d26c02e0a5570ec13021ae88cac0d95c68e07a9b19bad53b8cf98873608dce8e4f393913323efdf38c8f1b26fb12127ab8c90b3aea916cd1c73d3428bd6d5cc02b647541f81aefe3dcdb94d643d147fd4a3c58488ae9cf706651b4d84184cf17b2bbe7bc8a5d7a16ec64543638073b8e6e2f21ec11d13d6cbe3f7ed898f57a8d792edb049aa879b1f492b77eed37e022e88d5c9dbb4ac0338f3d7ee5532df851a65c031b81f15165a235cd9eb9b40d292ae6718a245b6c365fbb25e299427399ee0ffed5be65a5ca3b5091c36977c78467f8974d3238561bce2af919d21a01126ed079880b421cef0a1566c058b245dc2f4f8aede7d17b848489ac6789bbe73be554d3b71328985397949413629dd66b0a8911cd2d810684c7033dc21a362ff8ba8cc1c5d5ed99781682e1ee6929e5126d02b8d9d59cda438c4b4abd434f107954b98d3a69b2279575f11024863c9fa0ce0a34ed516206511065732ca5467e48c702d8ab7279411e8c3fd93061de838db1cbdc8a1000db440ed79bb32f0adf6154ec384d10ed6c9d2de8f69b04feb8e7c398f52e32661c8feaa295d2db41f8119af199c681a8bc121c9aa8904e90e3bd59658aa8868cb2175224bf669a6cacfb266c3307bcfc9b90589635dad76429ef517c8d9e0a5f7eb9a9aafcc1bdf327cdc58e8f72a435b940c3f708f857d312f5abdba250a3576d0833888566c21bcbc968d694a9ec36994fc44e9dff96ffea3195074e3ab93f660fcd55c9282c9a7048499c689efe450211d8a26d17123a1fffacfe9d01b13840797165611fd82a62f341e30986de06b8e5fafddf67b532b4d86134cb02adde83e861a78ea45ad224720dd0ebd9455f233772beee3ded7ea3e729429ef26648b5ce1715b339bd2f6cd3c6eadf0ec80df467d429fd97c64184982a5f2722de7dbe33db6211b30860bee34b38daee492149f86b7e79d8a3233f434ef33923b051182264d172ea151da895784022140601a29e7ba65af86ed5fb1a2a485944d9fa695acfd66ececf52f1a31d2d8127478411724c6028eaf99e16105a222c4bbc6569487e41dc5b255024b852aff62341f5bc103e00263f1bd045f5b0d961b905596cf80ae93137420a99d84093dc0da05f0aa2605f1832a0f41ed741e0e99ad65560d03cd1bc3f31144d8ed02686a844cd274a8fd826bad11e079142cbd0f0575a8b3c6fa76469229d6e992d34ebde2a46311a7cf5baf142303e2ffb1e9e185a4be3ea3ab08109741c765d73eb0774dfffc1cc50f8041c63a242dad57fc3b4aaa35180b31fe641e6d7bad851b79a90d406133325eb8797f0a8008cee7f252b5050725a5edeab1e1f226c0746269eac9df16fa5623d01d4c899aa596055cb3214e146b076175a8a024d374f0762956a3245979743c67273cc8839b43c135cb38e6314fc14e232042bf2b0b001f3e9adf3787785e227d12bec080e7e1ddc577daff30c0f34fe67c0acc7cb6b62e3e11db6a1e9c58e40c3089b6cf9ea55ce31e76d1e18b34c5c21d626c7c2e466d1528ed0909524c844c913124309f969727629ffb1d55bd2143fe8d69de76f68d675bd27f1a94f8b0ca6fb680cce03a07b6fa51e9155ff70451ee78cb27987cc64bd9c5e5d5dbb8da7c79444941b235c10ecb9ac1f793331b218dc47c59583bddf06a2bb62884b7d92869c749baf1c0c1cb9486f58ee74dbb490e26a151a0e5dd9596b8a7387e5184d1c999dc20a9549e51905f452bf86bb1676be04346c71434063944009491ada73ae21cb86e561af2f8474e8f07972fa547a7bd38a6b84ed1701a5d5d85b7f7b8dbad6286b35fea43b1799fe0c9bdb575511e748949e87bf40f15e7e519287b58ff6d596a7e2f5b3bc28bb171ffcb99bfd0e935a8d101718d6f6796b7f91651375461a753cd71c07921c0ff339d81465a5a0ee6437fc5ca86096b81fbcc2135bf9535ab81b929749ca907b1794e9b439bc44e90501e50f967d8910042934b55f8978bedcaa8abb68b5fe94f1bf2e998c49e7f8a89122eb49e2b93086d46a080b576de9fa4e57d74f8dd05efc469ff7f3e2fca839e234dd50f8fbe48ea1736b6a95a5d313a845152cfcf2b4b66e5ec1959a5691b513207d815059f905b61f107fbf32d961460e42f107f40e379189fc39c1b594f8865e37194abf597afb249e5e81ec6b23d4175a04134351f54832ba5e26acdaf994727c2543e7b48b6db1fe195829d980f3edffdc8a720640c402089e0f19f823cdf7ea5749265a01aeb73f7f0e70db1b93414c2a748a84dc7f7ba647467a720d26edd910f0400f886bbfbb3b37d08df772b61a3800dd45ac2bcbf611c3b9ff218487f57b2ae7461c015978f5fdc5df55ffec3bddc864f62f1ddc8112805f9e869e8ff08cbb44cf2487e3f6de555df93cb28b8c5ec00cb9e25c2f3c1c4a404386e2bec0aec54bf84fa6952b049add64b507e5d559c09d1a76e3a1e3b0887d31858c301179ea9851111329ec695c2e9b25d1367c8e6d0906187ee950c2979c7a9ff7cacc22f7aaaf70bfdd078fc05d2930a7a26b53d3922eb1696fff52ee6357803de275345d7ecec57d2d4a077bbf499c032abb613f48dc074af46c148f172e0eed65313f3f1eb20f89dfdc7c4c30e47e092fa619dcbd0f4b7a21b194fa89446687172e642c1a5f5c38fff634021da2de4225921427893e1b234716114c1f192195f9755a2a5e5c973eb28185079850a704793bb1a4e6fe6518baf57604901f6c65160411d341d075c083f0f6589ad5db5ebb9683a8ca3709fd9c499b7f44c131380f33edf4782b75a4708b3570a4f95f197a078a3e40628c385acfe84883e3659b167c52e2d0a243aa99006c294759dc104899c7787e8a1040acb5355055d72c47bc805e479e90da8286f4a82f8097c8f6cf1a5af355a6f510b7d0e98b69960c6584f3634fb720d024d4da95f8c17600c5530f712611343c243ec3e55e0c755dbd81ab0cba384d92265b732c476878741d305639334d56439885189d31e1296bdd4048f0d835380a70197f328065ac187de11b42a77e10a78ef25e1de1dc173750be4bd5fcdc14accd21606f3b269f0d0f94d6ffcc309f20994751919f00bc1e9eeed184d8ffe7ad1c583a03e6dfabb3aeb241799c581d4ff067ca3771cba7fbc938cb87c3b852a3c8b8d7816c0c3b34e7524733cb3a2456419b824eef70c67de70ef63171845c63e6b14fccad28d8e252d7f444b7d8ffbf202bab80ccc8cdf76b00d4540b47a211f4368a0b934a928ab8d41b406b0181ec0abfa33fe973077987b67edfa5eba54d8b3cbb6ac7ef1f9ef23addb3016a2e0471088562122a470330d6cdf9097723486510a82014f931469439101916c051cc7b771d0ac8c107703ee9524ee3e2be1521a014d9fa5b11d10e49931b8307e7a1796f6c6e96d7e5eafbf21579c076438dd5d9f9d9dd2a791a620c1f8a1ed8e35fa03a36ef8669348d7241d3151e7e3f28ff76c39dc2847ec54e4407ae42e74b62ceceec348d2b4533cadd176e93fbb5554fe79ccd5513a9ea205b4df21002d476eadfc924a0862ed12d5cac719227d16309c3218ae74017cbf722bf9a1870ea751edc27535ccd953ef956e9c886874ec0421022041ba1a32cb202847d1e4350a0ae3dd20a4f547bca99ebc10fb89677265d96f414e4e2d220f48e41bc1f0878dda75a2404edab55bbb56e8dc083a3add89d7175aeaa6b06574bc99e4578948863f41b46f875eb267903149858b7a69bd45270204c8b5f8afe3f584446a38ad8cfcdf18a9f429167765601ace3d3a4d70c755405652f0cd7ab3d0a633c8bf4b268cc99bf57e55288369c0d19dac26b6b0aba14667d58ffdd52bdc97a076374c2d8ae1813f57febef5c059635e0e47af1bb7c4d006d993944c315e61fbeeca3a34448ad047daa6c4bfaa96b3049ce25aea2984a4e054b40933e65035c79a231476baa5a54c08aa35fb6b9c8a7989aff1d07cd58df0e32088043f13bcf8520a3d73f280d4893cfc39d6d647d89473671e6195886be3f168b88621de11e8c4addedb9c2dfe4e484ab60b92feac0b3417c6b5f8ff626d22cc68da792aab345998363cd0449f1427678637258201ea98d1ba67c9a7f26d9420876de4e1e5504593993a693f6b009c093d911b5bd38e93149d7630b885c518f623059b133b4ae4d01a84815fbb7178f771008820a046db4ae3d187874b9d35117991c70ad262f9b1338e781d81f2f3f606f1c3c10175de9228ae378c3f10e5090bcfea599b2b9e7cb1b6b2be8bb97457f243fb62a5fdf353030791d4286e2a82487ad06c9f54e22b2854fdcce3ad56e80cd067f39197af8e15947e16df816450968adfbc176e97fe562ecd5b98c6c39783b4b2108a96280d6f92626c4db9da778adbdc8b1709a4a0be7d0f822aa5fc5445db6bfca53b0b31b40f67ce369cc249c7657dcee84d8232cf1893bb64a839fc10587fe7b7239cce743a6de264d0ce41aa41674dc9d3cecdebb54ba6d89762dbdd30fc90f2e0e9ad05ff03c880b94ec92b4cd9ff67a57f2aa267ebe2f8c4afce41de5c73ef43852fbda46b98aa9618395cf5bd220507d013c123133bf6c2fbe77919c310805ded636e78b58a224aa8fc95faf758056bbe7c2f157d5026334a0b70712ff527c865dbfd891bf304deba41d2a614a1967ebd4e798fc12dd9a6c34305a23bb20a3b8ba8ebc3f63434c93d44bd28bcff9407deebbb9085ff563770134656d4430a15a6470a0de3ad62726a67d3b513140c79606241a42d32b418509f2735628f9fb3fc0f8ad7f1b4727f69f5983c3ba1b44f5e1fb87ea51d1a4f46f83532f2084871fd84133bfe21ac47d8b2005f6c2cd0093dda4266cb426b91dcf81870994fe24d4add2f714da79aca002b620f0f1e89c78eb888921d0206c8f3f4c4ce3b760a9bcd45d09b575e402b9108a8caf8f7b848dbbb6c8de8faacd20d9e708277cf0c9de98a8b8adb15a98af373555dfbb860c5f186adc7b8108abe53d68db146dad6a8804be25fde03154f296d110b846b400ca870507ed8c7648dc63b426ac6c4f871b9a11ff1071cbb0eb84cd4ccad1e2503eccf2753e1783728bf344670e9be6572a9f799e31cb5104b308bd320b07f6e988267fdccbc6f66d6ca5cabdf17b9120fcc6369d38845a0deaaa90a07a201e481df14548894e551c95766c5f02fcd4953cd63b43685849e7e9fdd8314ef0976e06043a2d09796f87fef5c76b26fe6c308169d7cb4d308fc360957d3e50ba04996edf95a3f03685d872e55f6de0bb45994f942c7f06053aed912cb5a429d23c38cde8c5e7446cbf67a17b16128a2b02b45174ff5ca604ddb7b13a7dfd7c041a2db6bc53fc721a3bd0c66d0a451fefe994a730775b19038c9d9777f1367a0be8055c322b3de42d6c7b51d7b3b6d8f73aec52c5624cc17836d7cc723210f8ccbccc8957ac4332d0defa6f6216697dd3d6c02675b37dcee03c2d015452f4dd8ff2a13fec91d074342e86a56a0fd0325d837d4747fe119cfc14e2128acf2c070be37cf5e35e33b0151ec7421a04b45b9ac3d602abad84accd9ae8f1e148f82efc3d5184f79043a35ebbc0e91e6346757f91f2d277a51868e0a0952e7c31189d67c60236a683199e787215cd5309d46749b54359678c14be385e7b77cb682327fbff3a7b4b1b17d0d7a92e5c157fe5c4ae595b11", @generic="c95e313cf3c1800cd5582c9591f59b6b10cdbdfa8632c286917b29eedb89b467d7ebc6dbd37d8efa36078b627f30b9992b39701cdce4c4d5eddab5a4d9ba3be0b2c82f268cdb636346537cc7a7088e40db6c4557b1b37a5a8ce9969a64311059f58d688d31a4b7f52503e036d891522fffd68b216b6a2f67628af97aa5fd128eb0a58821", @generic="c816e65e4e054d4fec9e1244f145c6b07c985693fe1707e36fa47bc5094c0f66cf853dea02a3f521ec9c2f3f25dc36495793145368f0fd96c20ff4636fc9a7516e4d6b691a18525371df5e4d0d3af83922942f88c2c86d44bc9df9865cbf5ef383f48691d3349eb016621355f4f1e42a6a1ffb913b11b68e846f19", @generic="3546ced65b1c5f604b3c25fd39e62f31bb2da70b4189aefe68c0e99ba0901e9003711241961497cd702ca5", @generic="38c033ea6eb67ba1dbf6abafc09e652702499288eea72a13828d9ea2804d7130d0a1a2eeee8f4908cd3ca6653544b823f6922fb1f75ea6164c57b82e8374305d2ffb3be9d6e40e98886650ec6b328c7323995da0aa724a8f55add03af6bb1d21d9f8d02d53c050d2b01467991064d5ea106478d6a84954221c56c34b163f8276346b6279e3a35cfe11785673efccd95d417a2e2b26e685b6925582ce0af63d7a08d9d87784cbd1e9b0621763f06df4405f970a25412e78ac7da626a0f4d1bcc1c876c413", @typed={0x8, 0x2c, @u32=0x6}, @generic="675d4d1633a2fa31e22bdaa8b28e7bbb4d684eeed70664a4059ece14ac63d3ca0ed244bf5482825f620eb65e7299d7d85cf7d96eff5a85eaddfdd73c0429561269b5b61c2612c2809748948317c9784d9c00862491a9236c", @typed={0x8, 0x43, @ipv4=@rand_addr=0x100000000}]}, @generic="2954b642738895f1d60b20056f3b0c31ac89361fde707117b81fe918a5a3a850075e328e8528ef6810e9b1ecbfea44adb55c3474a73c187ab9a2a7757caa2c9cc4dfd26391dfef874e671d40a3a710a8d823579ee78392d7a3cb8673c658fac8abaa968db1df005c9067107fb07f5e977e54a18d6a291feefdb1030103b2e686264786bd97c176c3848a96456f97c50dd8dd93998c08baff8aa0cebf8b2322d87d1f91706dbbc53e13", @nested={0xc, 0x28, [@typed={0x8, 0x3c, @pid=r4}]}, @generic="2d983e1f59e86a75bc651ccb", @nested={0x21c4, 0x61, [@generic="c9212e93750efbf1c8d3b596329a56dcc0b85e974fa9b860e770cecf21a5c5aedfdebfc9bb04cf69dd0283c1ad16932143ad9a67f7d9871f626202b0bf613374cd6496f8ed9b7f4b67c368e0887ecca5f2e3904cd9b899aa7c07b269fe5eefbbe550a34ac3bdaf0955211fd8ec2e9fa1becb75d6310aa82c46407cea927101d60ce4c1fa3cad7f0bf8278f36b8ff397b94254b5409d74035ad2ccb5ecb9dd1595768aba862de3dda345596c168d6eec34afefdefcf12badecd87d0a0d5c8e6cb316f52c137f58b1a3356fe909a99e8649d07a84678f6244d1ac0e2d45b47a14e747cc687c89a1066e57ea41be53843b34213", @generic="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", @generic="07ea067e3a52e564e49e9b7ff5a2cd38dbed5c304e9dede49f077f210f5f81fd60615cfc8144b685ad080a520ba6a52d641f461dd8fe6a4d9b8255e9d16132d648b4c8f3cce673da3a8fae4630d19c8671aace023d054e967d2078382ec739babe7035517ab17d7fc984cb24b572a9e6b88f3579061032c83641aeed66db8f1c645f78790ccc5add5396dba3d9b06baf12bb5410622dd6c589212b710099832f93139e56c2965a76a64acc54ca2f9f4db271a7137d7c9d315a18eb7ca1463f4c00", @typed={0x4, 0x2c}, @typed={0x8, 0x8a, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="dd610ffa076e1a7ff7777968847e5f6b464b1319bd598606613f4e596d5cd406f0c3018091df33c4436e01e8e155dd1b0370cac9094ada56d4ed939466a9eb7b4deb3a33f8307366876be1ad2f23b899266b42e49b99e0298de7bb711762356065b37ba95f608664b2699c3bfe2942202a0903d1cd202aef883b4474c2d315b6bf852a3bd170c329c2738f58cb2d601b60a79662711c761a11e85687bd67224d3fe153fa7bf78e68b9a5584eccaef02bdaf7a0481ec56131addb3f55e8418557b3649025d04011bca3410ee97266f91b66b1ce870f925b0226485a5882240b00fd7cc27fedab1a81c77e1b16c7102543da15d1a1a89d16a22fb088213305545122ac6a43d931596c54d2fc77fd3c88c2ffdd58140f2072153afe126187381e4acc7a152fe2c8c8f7e6f459d3e9ac2d13752e245213b23a89b9ac3b7619b150f4f039491e9d437cfd92fcd247cc089f863802b2cf2c86c8fa80d3528a0e45a2a650f1f269d94c0e80e10b5da2e031ab2b0fd6282c93d815c2fb747087427c6394068feea16d4d15ccbdc01731d1f221b3a3a42531bbf28022aac0d3f1b5c8aea5d1e6559f6dc3271dbf3f4c76cedb4021b88c7dd65064c9ef9a90ee0c16c07ad69fb43230f664f633ce334cea23ea7e8aa549e1b09e096fd9f55d007f1ec3e0aa98e57b52533447ceac0c00e98efb2a1b33c6b3032eda12f611e4e27b8e411cf19db768687c4c76c70edfc3447543678127e7368b6f4b31f3ef8365101554fe1e1d7684a3e163eaa1b487b183089bb59ae8fed42d1b5f690f3633f48b39d60b1886e4e611d1ea799de96cf6b54da90a74bd50fe2afedaa077f771008cb3fec07ce847fdba3d4605bf72fa3cd7096eb0e9f1640aafc2605370bf3065cafeb5379cee1057ba0cc79c5831fc5c52dd1f986605d158f7ec47a3eaba51557ddbbc6d6f9eddd81e612e59078e8c6d03156d61d51014caf0384dedb4047bb064d9043ba5d43336dc36d7c97b5937ccec3559e1a5dfa286005021547f6f12a70fbd38a13e10d085b2216132314c85b5cbac7ede41512f48ed6eca4e59b70394be51b1496afd86c02efbbc43cb9c6932af297e6df7e93e00862ede7e23a34d34ab85fb9a1be5b80d06cc8007d535fe6cd7770f6f65d0ecfe93353d6510ea0fe033a8139bb317aa7dc2d836e0318d524abc9b5e1ae62e58868eafe88ca94e718d29baa1fb2c202794d75b5846f449f4e8fec83bc1bf59405b0cdab05c40be855bc40f27b87d630693ed788a573a6419034e762cc8adcb13636b6c465156046c7275042d1488a04eeff63a684435e68c9821857a42a57151ad04a42929dadbe0177c48b813b1c7027da43d47cdcec0611d9095852f4b7bfc60c9b44b9ac4efcabe0e6899ede835cd43f34d65ed114086447901dfeb44e3360141a5a184ddf11f776b945a24b027a7ceb5b096e70d980379639991d201f67a5d1192c5acde5c8a76496fa4540cac1c6ef7eb24114c56f038579604854065c669ab0f3c5afc32357d8b9a57b9074b4c3e52c77d0b121deaf96e2fd32ecf79caaeab9cea2cf21570ced8feb84fb89d96c002db25b09b8911b6036c2223231356b303238d4c3678ae05fe52c75adf36dde43c6fc45111c76f096360c5c2a17b3734af4ce19a8e6e59a43c2582454e92b1253455e6e43ac2fa21c01f0ea2d1d99e79eed0dbe03ca6e7194b1f45f62aed6f0ceb4baae99cd417b821eaf8a10515d1b23f0590b88dff252b1c46cd211e5bd3b66c9051a3cbc14c1c9b2e0000f2b98dc52f3bf050a862950320356f4e8a22bc556370ffa912695f228cd8f53034c4f29707029e4aec8849685368d536a6352c5794e85b4005152876aca2514a34af331cbe1840a4805ffefff69037429510ea798b0d416da682e8012a0a79980b369339ad1d16d7c315b2a94a20783d2b553af8a967e0b6c85c4720f8576baf39f69e1deee0594853e9bdbd3bfe073d09db215d80832a628135e5867c0dc22d2acb3571197ad5d53b20a8a3b277fc78d94bf9fa0ce52d1328e1b8153f9b3f6873a61840d41de29033ac5024dc621a3ac3f96d76d54717cf29318fe5e286e105506b487ce69ba7eaa82230dbc848a376040ba9bf2bca5dcb1ca60274a2490e7bed31be3e23b2e1a7a83834c220c94289a041a984009880263634fbb6899a7815c0dbd0c1fa8d9ad984f381dc6b45eca7f7374297d44fd06d0b4da6d9fdd89820b2a395f60bdf822030cfd437df458f397f01f22669240651e407a37700d67c7c26cc122c1e2c921e5fc6f95395852e29c0b20548ea4304236fc78f1542dbf27a34a6b34b8b6e14be1253d290909dac785b5564950913f1a59f432115543f8348a2cf45cc6cbcdd2795b6b37020d4c7ca78760a87399785e7f3261917d385a5cbf1a3f9a497f7121f2898af9113f7eaf7060a671a1cf9cd7e1945625390ff853e4d1aad709962934e48d8378e38aae0c03c2e4f85ecabecb9b2182b943b8d0a44f23c3f590b0c65eb39754a3f99258e5d0d9f56f39409971c6aa35af5e12e6b14633eba9854db79bdcd1e4e46d6ce91a20230e7bb0ca47637ae9baba2c763e6f1bdc9e9829c65075d6c3179c21fcbfab67c855a01875d834de17dec7065e04582f20dc722625a74aeb47a0bc3ad7024069fe221759c1dd6a488bee9862c8bb562eeb2490c4b888ef0acb82fe27e181199af61fd4733e7af19d33bca7e32e1e7e0278e7122ad49b772049e4218a58c8219598d49d0daad2a84a97eb7dd7a996cd2010bafb7a54f6e48fda5cf64374cc2d1202b9ca30c77aedb7c70b8a8e87fa724eda52855fa75422067d7029d51983d8f196f772df4c4c514832d5eb39bfad70b8b71a069ffc18128da5bbbde0b3706e490eb364c3e38208dcdf28b8adad98d020426e02a107799cac8bac73757fc682f0dd0b58fdf6baba3ee5c0331cdb7d4e20e4bacce56b48f1f59de7773eb6bdaeafd6688144df93023036fa51b0b2e47e7e83bc47db469052b86163f0c39a86ae5c49b91c7bbe280abe3af31945e2585e5e26fa41b0236f75a98099b54cb1932ad9931491e5b1bf59a3e52922dbb1639c43c44570926b507e0e9a872aac4c21a66e21ab5db46b49b9c7aa81643ee2208a8e56bb967fd6ccc894aa2d24d63a8c32d8406539afbaa73de0f8cbb123f2ac6f677d47628122035c02e4e01484594f80279513a3269ec1be16489ec57ddd5e0df5e5f3be3ead1eb5bcb379d7f8863c44f8295f9da0085a9744ef4728f63b002f8888990cd44505849267c839f82c5d0940d6b41fc24def5b30f2a0e5836dd3bb649bb414ff272b9f47b25ea3bdbae7710115ed1987a436e42378572b201f6b0cc273dbf9421b2e46a994eaf3f409a8b54873f2e59874b8570cee00b213ba5bccd247e34e5a3349f4dc932f60763efc88816ca2ab0c0796da5f643ac62b8b20bef7783b3e583627962cbb715b2f8b5ccb5499645df66aa03e95ed618d78a0a450d73a93d1735bb625016856cc3b41328a88b07e15685d31154483429ffd8180bb2dfcd129f228a9b1f973f6f392a51c37558741baa0fc23a09fbf8cd342a2c742091eb74e87b205f2080a7a192e35fef396da72f1691145694da83141819f535c55a314d9e2a6fcea61a1d58aadb26822324242d9d44f22cd4b9df246c1f29e9be3935c13c7166fe5c8a12c85ff0736c5425c0e93513b8873d21dad98635b2ba0281b1c7d15afb6b489df3637eea07da40b85d8afecc4240b15d25d88918ce9d907b676a3fd021164d2a9618631ea4d4ca9eda0e13514fd88eaacc63c4bf37d2d6d3c39881654f98c7846eb797cd929d0956ff9801deb4867dd170d321e0409db5f00e14fa486cd689009ee25280f5ef09a90471f9fab66646004719cae83af80a172f22e48d7c2ea95ee388f4180bc6a4e329ec6ebb1824d9722a6c2a4f631500baaf7d425f16a324b16da391f64592573b46c6bb9c16bcd9c896eb8fb4ec08d4a5270f2c825d9ea137acd078c0dc22b9cbaecc49489d4dde33d53097d5a11df9f79b4c3fbe79b25a23ba286a00182b631074672a298d4863e5776aa635d153cbb361a3d307fe135374bf5961e9fa013c987b8cc8560370ba3c1082c62fedff62ca492bce4f258b672ee1c55a4fe963aafbbc638e1dc5d4267838ef4e40595b1e85e02900860b4353b495083e723747e334a45b13c5d391d04cf721b88d7e5fc4461594bab3c31f20cb80b013bc6c9424f41f679b45cedca56a0bbf1ef83cc31488ddea152e9a032f78f64f7cbab1c20fd542e0e35efb2225ed0a4540a623fa3d28970e6fd1347af09188dc65df1c195f97008fe4ec620001faca452e9b3c520500795efb76ff66d35f345a9fa2dd9494dc877d940094b2e6d560aca990cb8e0187de4deed3e3bde51da20f5ae99817756e13455c02f883ae53f0ee53967538bd4e845ce34b88adc80a870a4d06240bc173e37734e85e93eed689d773561fbf5c6ee519b63825aa8ad894ba5dedb1102387f7e66fc07bfa4447534de48339a79ce0bdf8d5f41c225f384198e0c2adae81de6f163db80d48652e8e1c3ef12d3ac995fc75b60f301b2fc3b0750bc067be1822d11461fcf4757c45a40ac9e259fc108c5e5e37bc5b1b073b826edec2cd0762ef96f13b640629aefcdbba0eb48c8796d26dc44533f7c2a793a5a113d3442c503dc098ed2458b24c6064aabda57dd2096dabfad750c2ec009fdd1cc5238b46fc0a727259b1dc45661a78ff42d99be8acc4ff6b0a112e3e10c95d55c4b45770722b734d0807f8bd300f8acc5fbefe99d124eb55a473a51d341cf682e59828cd74041440f9fa0862765ff516bf3a0ef9b1e8830ffa9286ffcb9aa701974f79d88b0b3a2e62538603dd60082c8ffe0aab08bed437a5e973d51dff6fbd4efcaf9cb81147e721633d7f08d7a3e8cdb1167862e282421d3bcc61bd2488f00638f369d24521c5ccba7feb583f4576a5f8c0ca89614d9f6386875ba45d0bff5ab24503f8ccf0ec7cfd918194402ad1af381eeb8d4218977746a85ade4304192d45fc70bc3a2e818919c4c70f9fb45e2f9133087366d17b4cb144787ecd117866293aa2c628d54740a52d67570c5ffb1402e6a0ced9f487a0f4b50cbd5d6af5b9f39caabdeea4e2ca0633542c1b0f9efce8af95980939e31e3d82e84eb9ebefac7cd75e30d2b4d0420773a617fe62241e22eb2ecded6310b6f961dbc2abb994b99ccea3d5386617108f446dd42c46509263de7a606959290246116b217f6f631528157f191b0430399e6c22290eeec253c4356deb3c6e2b33aa10058a8fe1f1eef1bdd7ec455ab72b7bcfba3746fbfb4725f74fd7b75fd7fdf1640ac3edfaa2645609e4518148bc60de80cca2f7abef83935ae2e3b5c5c6e1991ff1bad6d80a945ce69fc9fc58554f858f0d886c60430a5a80c605b9b0e490ba35f38abf15c01e96504b2a457a32774027c1be22d8da5ac0264a2f24870d039cc135a3da7b3dbee209498f65cb2feba61d6408991878a9467b327d2bb2ea15c1c8dbe7d1bc2272401500d259a2270876efce49b263a9952a4ee1ccdbcc8b2104f47445f41b2848a968e738405fbcc2933fc8f63baafc6e55857b67d4a471293fcd543632820b05e9d351a5d4b66130fa03427aab4cce2114c1e7a40570a9a4dfbba13f2090d35a7c91a971007d67253b0d86657fa6a12bfdeb6ebf6f555549b27b9b55df48934bc0fe825a11e5c12b84f5416acb1989a16e0111a326b8eda6d4b49ecb12b5f9ec323012f32b"]}]}, 0x355c}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000000) r5 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1f, 0x200) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x14) 05:58:03 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'g\x96\xdd', 0xfdeb}]}, 0x5) 05:58:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x30000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:03 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:04 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x93ffffff00000000}}}], 0x30) [ 943.511849][ T26] audit: type=1326 audit(1556776683.940:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31635 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 943.539054][T31637] device nr0 entered promiscuous mode 05:58:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000008900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000008940)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008980)={r2, @loopback, @local}, 0xc) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r3 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x1, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @local}, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x7) r5 = syz_open_dev$adsp(&(0x7f0000001240)='/dev/adsp#\x00', 0xffff, 0x1) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1c, 0x5, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4000840) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x120, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x886}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ffc00}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xcdf}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x42cc28cb2be09eab) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000000c0)={'hwsim0\x00', 0x6}) 05:58:04 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x94ffffff00000000}}}], 0x30) 05:58:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:04 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xbf00000000000000}}}], 0x30) 05:58:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000080)='tunl0\x00', 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x400200, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000021e82438e578a7b45ac89e0978e6b90a5fe1b2ead2c31559895343cd510920b8416811014c8f6a17459f36225bde3ec800000000000000075d5a65926af36b920365fd403e6214680e24f069faf0d37513"], &(0x7f0000000140)=0x18) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x4dc60b3d}, 0x8) ftruncate(r1, 0x8) 05:58:04 executing program 3: seccomp(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="e3e62ac584333a7624fcd5f8854ec5c309979bec7c"], 0xfdef) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x101200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x20100, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xa9, "2be92dcf452a5dc0f1cb76f6c3b154d3c389a9490c409db7c6d022606c53c07edb0721ba8a5c8a0075279cd0a858a400a818e37413e7b5e91bcf378c36226955fbba57b939d143760d6acdd8d9d9cba7de9d41b0cf89428de384dbd3a9b25c294d981e02ae0d2d26b83497dc42c826f3c1177afc24e5c2f0fd84bad154bce5ab2d528f992a9a71d7f865c99272c9e6a277e3a3264388c7b711820cc8de03e05276230aa967637bc90e"}, &(0x7f0000000280)=0xb1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1000, 0x0, 0x100000000, 0x3}, &(0x7f00000002c0)=0x98) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000400)={r2, 0x3, 0xffffffffffffff5a, r2}) 05:58:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x4, 0x1) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f00000000c0)={0x100000000, "e8f90109f8b2f5dddcb066423d9e25c93851c671d9973b3d003067f0c8788efe", 0x28, 0x7fffffff, 0x5, 0x17, 0x2}) 05:58:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 944.381867][T31978] device nr0 entered promiscuous mode [ 944.387527][ T26] audit: type=1326 audit(1556776684.803:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31979 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:04 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xfdffffff00000000}}}], 0x30) 05:58:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:05 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xfeffffff00000000}}}], 0x30) 05:58:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:05 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0xffffffff00000000}}}], 0x30) 05:58:05 executing program 3: seccomp(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:05 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) 05:58:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:05 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000180)={0x3, 'dummy0\x00', 0x1}, 0x18) 05:58:05 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x2}}], 0x30) 05:58:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:05 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x3}}], 0x30) [ 945.288436][T32130] device nr0 entered promiscuous mode [ 945.299713][ T26] audit: type=1326 audit(1556776685.705:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32127 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x101080, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f00000000c0)=""/205) 05:58:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:05 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x4}}], 0x30) 05:58:06 executing program 3: syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xfffffffffffffffe, 0x10, 0x200}, 0x10) 05:58:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nRY\x00\x00\x00\xe0\x00\r\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c9bc0a843b"], 0xfdef) 05:58:06 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x5}}], 0x30) 05:58:06 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x8}}], 0x30) 05:58:06 executing program 3: syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x100) sendmsg$tipc(r2, &(0x7f0000002780)={&(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x4}, 0x4}}, 0x10, &(0x7f0000002640)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="e5e1a726e00f020424ee90db508eed9afde071b40999d148e17f0e89cdc22c3490c0dfd6df1bfd0f6858a76d5bb3c0886dbf49cff05d7d97e1412a679cb3113a3c8145d0aa1f3e0d2ddc2ed3de1eca1221a88d47cf78221ce2544194ffe1562d3340c045344fa0329eb2e4c5539c4a8cb65fbce74a3c565d984d4bccc734de50c7", 0x81}, {&(0x7f00000011c0)="de4ee246f3727ea1c345fafa39eb31b099d95ac7faf420f12a8f6c73dae737fb412c824ebab393f6e0bad7970d106e5e25d555cc88deb68801bebf27519ef7ee77efd568412a9b084a891caacc07613a360862f33fe229ecfcf87fb57d47657e78b1a90c50ddc8fb663d21f5180147fac8452372e6a4f84295cd3ef7adf8c4134a084477fb71abbaf534092e20fa3a", 0x8f}, {&(0x7f0000001280)="5c9278a896e6ca0f0eaac189a04049c380ff8458cf5d00de18a65fbba114088feca428b203190e5905f5c2772e6fb06d9606fb7e32f0365f402c74a0b402540cde226e7bf1b048010b0be1da92399f63816feaa448f28e738a850680ab713a671fc2a7e79b47ff8b983b85232701115cea1ec03f0af31ccf", 0x78}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="066cf370ae7de9c2384e9481b72f235df25d974bdd8bf09b1453afd3e4b6dd40096b662a431308f1f86a41f9cc327c2b5c392145e45f90f8aee5f0bef5ca4c3412ebe6016922d4fe3b84c256a4753ac6994d3aa021c99702c2844b779295fd2d44576e4b63bec43c0ee6d1bf0e6308c549fdeee0e2", 0x75}, {&(0x7f0000002380)="df28c41b733fc8b21429b18cb152ed1d54d01ef51ecdec570426abc3b8b43256d5a78217951698a131510696c7e928695086f16ae96aa9b93abdfc0a6aa857c9542ccb4e2ed3cded8dabb814b604d3ebe93af4238a01687bbf9f9ba0e72027d9abc80f6717b9aa03d8245d68987eb4226489679a63e01e50e3d40fd1bf99757a11891c990df94584e58fb4d5b3e3e6c985dcf37f940ef143", 0x98}, {&(0x7f0000002440)="98bfb8830439b37e723a298abca03f7a6055788642c81fbfa68f5c5f84f1a00acb31d6f2334fff519411c714d6affa586708375bd1c00d2703d35921df42071bc63ceaaa1f6a8a21d2f6a14349f7f6a5e64e35b96abf7f3a00ebc15ff53516cd470d20dadfe5f219f275d2ac32cf48a6ecb200623c1122c8c96689871148322e4d96e89d31a3c0aa3bf81647a9c74afbf43fb437fb8c1d43c646923a41ca9ff182a888029683ad662e6fc51cc68bd824226db3380a949cf361f3f3cf84a079ca5d8efa2e5bec483b", 0xc8}, {&(0x7f0000002540)="25abfb2cb001ed5ff0973953b8fae1f7d7af747c485045477fbfef00427d6693b906d0c56842742a4738e06b2dfe0a12270282976f39cd0decff0cc320385baec1a6cb7ae235bf4b71c7082c5588bb15b966b2684ec93732baa9099ea41ad8cc5670f0377bc665d3bbd480d836dcd9d4941c23afa43dcbe7d4290d25c35a9a3acf274c3577ca4425ace36dff0bd80119fe35a78f4182713ed0cebe6e531fb6c90168609b41105a1511d24a27ebe524f2fd086cf08d8b4b42f8102201e0bd93b2be99fd2f3498706ae6d8b665164eb032dde1f602eb1dbdd6b6f97f", 0xdb}], 0x9, &(0x7f0000002700)="44bf7f9838ea54406dc5107c546d7491778a65c479b90629844b183358b866a1bca6e3ad52057bb07c18832b0a3d5a80b3322ad2a6ef69b520b5c53fbb6b4d107a9908007a130f396db0d046e06b2be8104df4c3cccfd3eacbf39c", 0x5b, 0x20000000}, 0x90) 05:58:06 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x84000, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000140)={0x42, ""/66}) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000500)={0x3, @bcast, r2}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x94\xa5U\a\x83\x87\xef\x8c\xd8\xd5\x9f\xd5\xf6\xd9W') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00638eddeb"], 0xfdef) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xb) 05:58:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:06 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x42}}], 0x30) 05:58:06 executing program 3: syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:06 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(0x0) r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:07 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xbf}}], 0x30) 05:58:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x24200) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000140)=0x1) ioctl$void(r1, 0x5450) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:58:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) fadvise64(r0, 0x0, 0x5, 0x0) bind$llc(r1, &(0x7f0000000000), 0x10) [ 946.690354][ T26] audit: type=1326 audit(1556776687.093:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=446 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 946.740561][ T448] device nr0 entered promiscuous mode 05:58:07 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x300}}], 0x30) 05:58:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:07 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x500}}], 0x30) [ 947.118346][ T448] device nr0 entered promiscuous mode 05:58:07 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(0x0) r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xde030000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:07 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x4200}}], 0x30) 05:58:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) pread64(r0, &(0x7f00000000c0)=""/104, 0x68, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000300)=@deltclass={0x99c, 0x29, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, r3, {0xfff3, 0xffff}, {0xffff, 0x3}, {0x0, 0xb}}, [@TCA_RATE={0x8, 0x5, {0x5, 0xfff}}, @tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0xa4, 0x2, [@TCA_ATM_HDR={0x38, 0x3, "16dca09b634dadbb43d6453571c75dfa75ce9b2f1eec1b42e38282b2e04bbb64a7f2fdbb983b04337dac0edaf104d6d8cd"}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x18, 0x3, "38580dae4fa15ca12e78993a1f6cfbe51d"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1, 0xf}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x38, 0x3, "4711756418158d0ed360172ec7ab441f75ee9e9cb5fceeffad417d66a6132f398a9b7c57fd20db101b1252650eb1bd1d26"}]}}, @TCA_RATE={0x8, 0x5, {0x69, 0x2}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x40, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x3ff}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7926, 0x3, 0x400, 0x0, 0xff, 0x6723}, {0x6, 0x1, 0x9, 0x3, 0x100000000, 0x7c24}, 0x6, 0x1, 0x3, 0x2}}]}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x81}]}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xade}]}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_MASK={0x8, 0x4, 0x9}}}, @TCA_RATE={0x8, 0x5, {0x2, 0xe2}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x824, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_RTAB={0x404, 0x4, [0x1, 0x20, 0x40, 0x9, 0x0, 0xe6c, 0x80000000, 0xbd0a, 0x200, 0x1, 0x5, 0x20, 0x7fffffff, 0x8, 0x8001, 0x8, 0x1ff, 0x0, 0x1, 0x10000, 0x7, 0x8, 0x5, 0xfff, 0x7, 0x8, 0x7, 0x9, 0xfffffffffffffff9, 0x3, 0x7, 0xffffffff, 0x5, 0x2, 0x7, 0xdd, 0x0, 0x7fffffff, 0x100000000, 0xf7d, 0x0, 0x9b4e, 0x8fa, 0x7fffffff, 0x22c1, 0x2ea6, 0x6, 0x2, 0x1, 0x2, 0xe6e9, 0x2, 0x0, 0xfff, 0x10000, 0x20, 0x5, 0x6, 0x9, 0x7f, 0x4, 0x8, 0x6, 0x80000001, 0x5, 0x1, 0x3, 0x1, 0x3f, 0x3, 0x5, 0x40, 0x3b, 0xa3, 0xfffffffffffffffa, 0xcc16, 0x8218, 0x4, 0x4, 0x9, 0x67, 0x3f, 0x8, 0x100, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x6, 0x4c3, 0x0, 0x16, 0x7c, 0x7, 0x1, 0x3, 0xd2, 0x6, 0x8, 0xfffffffffffffffb, 0x7f, 0x3, 0x2, 0x3117, 0x9, 0xd292, 0x9, 0x2, 0x80, 0x4, 0x8, 0x200, 0x1, 0x0, 0x6, 0x9, 0x0, 0x1, 0x3, 0x8287, 0x1000, 0x24000000000000, 0x7, 0x10001, 0x100000000, 0x7, 0x4, 0xfff, 0x1933, 0x4, 0x5, 0x1, 0x3, 0x5, 0xfffffffffffffaa8, 0x8, 0x80000000, 0x1, 0xfffffffffffffffa, 0x5, 0x3, 0x4, 0x1ff, 0x36d, 0x6, 0xbf2c, 0x2a53, 0x3, 0x1, 0xfffffffffffffeff, 0x0, 0xf5f, 0x7, 0x3, 0x6, 0x401, 0x80000000, 0x2, 0x5, 0x2, 0x100000000, 0x101, 0x2, 0x5, 0x101, 0x7, 0x4, 0x8, 0xdea, 0x23088798, 0x3f, 0x1000, 0x7fff, 0x5, 0x6, 0x1, 0x7, 0x5, 0x1, 0xfff, 0x100, 0x7ff, 0x100, 0x40000000000000, 0x1, 0x9000, 0xffffffffffffffb0, 0x81, 0x8, 0xffffffffffffff80, 0x0, 0x5, 0x1, 0x2, 0x4, 0x8a50, 0xfffffffffffffff7, 0x5, 0x5, 0x9, 0x6, 0x0, 0x6, 0xf9, 0xf7, 0x3, 0x0, 0x5, 0x3f, 0x6, 0x7fff, 0x7091, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x101, 0x1ff, 0x100000001, 0x0, 0x0, 0x80000001, 0x7, 0xfffffffffffff9d3, 0x9, 0x7, 0x11cb, 0x3, 0x7, 0x80000000, 0x6, 0x6, 0x1ac8f7eac, 0x0, 0x7, 0x101, 0x0, 0x4, 0x5, 0x0, 0x9, 0x1ff, 0x101, 0x10001, 0x2, 0x6, 0x1, 0x0, 0x200, 0x7fffffff, 0x646, 0x800, 0x9, 0x3, 0x2, 0xfff, 0x9]}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x7fff, 0x6, 0x14000, 0x3, 0x80000001, 0x3f, 0x4, 0x8, 0x3, 0x200, 0x3, 0xfffffffffffffffc, 0x2, 0x200, 0x2, 0x9, 0x7, 0x8cb, 0xfffffffffb10e9e1, 0x7, 0x1e, 0x5, 0x3ff000000000, 0xffff, 0x4, 0x10000, 0x7ff, 0xb4c, 0x100, 0x800, 0x6, 0xcf, 0x7f, 0x8001, 0x7fff, 0x7, 0x1, 0x1000, 0x2, 0xd188, 0x9, 0xfffffffffffffff9, 0x800, 0x4, 0x7fffffff, 0x394, 0x4, 0x3, 0xffffffffffffffc1, 0x7f, 0x80000000, 0x0, 0x7f, 0xffffffffffffffff, 0x80000001, 0x3, 0x1f, 0x6, 0x1000, 0xfd9, 0x8, 0x1, 0x3, 0xfffffffffffffffe, 0x2, 0x8, 0x101, 0x401, 0x401, 0xb2, 0x40, 0x0, 0x1, 0x1000, 0x5, 0x7f, 0x9, 0xb22, 0xdbd, 0x4, 0x1ff, 0xb00, 0xfffffffffffeffff, 0x9, 0xc6c, 0xa, 0xff, 0x40, 0x0, 0xffffffff, 0x52, 0x0, 0x1, 0x7fffffff, 0x53d, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x6e0, 0x6, 0x4, 0x8, 0x9, 0xfff, 0x20000000000, 0x0, 0xb4ef, 0x9, 0x4000000000000, 0xfffa, 0x400, 0x9, 0x9400, 0x29, 0x3, 0x7586e06, 0x2, 0x3c, 0x80000001, 0x6, 0x0, 0x2, 0x5a, 0xea, 0x677, 0x9, 0x8, 0x0, 0x5, 0x200, 0x10001, 0x1, 0x0, 0x3, 0xa389, 0x8, 0x5, 0x6bd, 0x200, 0x4f, 0x200, 0x2, 0x101, 0x0, 0x1, 0x8799, 0x1ff, 0xfffffffffffffeff, 0x1, 0x8001, 0x8, 0x7f, 0xa52, 0xffff, 0xfffffffffffffff9, 0x3, 0x8, 0x2, 0xcd, 0x2, 0x20, 0x1, 0x0, 0x1, 0x2a7e, 0x4f, 0x100, 0xffffffff, 0xbe9, 0x1, 0x7f, 0x10001, 0x1000000000, 0x7, 0x5, 0x8001, 0x0, 0x1, 0x0, 0x696, 0x20, 0x1000, 0x1, 0x1000, 0x9, 0x7f, 0x3, 0x80000000, 0xfcd9, 0x0, 0x0, 0x3, 0x21, 0xffffffffffff8000, 0x19, 0x4, 0x20, 0x3, 0x5, 0x6, 0x7, 0x3ff, 0x400, 0x401, 0x9, 0x81, 0x9, 0x0, 0x84e, 0x8000, 0x1ff, 0x1, 0x7, 0x7fff000000, 0x8, 0x101, 0x2, 0x91, 0x9, 0x6, 0x0, 0x6, 0x8, 0x100000001, 0x2, 0x349, 0x8, 0xffff, 0x6, 0x3, 0x3f, 0x4, 0x7fffffff, 0x1, 0x100000000, 0x0, 0x8, 0x2, 0x7, 0x1ff, 0x6, 0x6, 0x3f, 0x8, 0x3, 0xfffffffffffffff9, 0x2, 0xfffffffffffffffd, 0x620b, 0x7, 0xa8f2, 0xffffffff80000001, 0x5]}]}}]}, 0x99c}, 0x1, 0x0, 0x0, 0x80}, 0x801) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)=0x0) fcntl$setown(r0, 0x8, r4) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) 05:58:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000140)={0x7e6}, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00630500eb"], 0xfdef) 05:58:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x4}, 0x10) 05:58:07 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:08 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xbf00}}], 0x30) [ 947.572040][ T693] device nr0 entered promiscuous mode [ 947.596440][ T26] audit: type=1326 audit(1556776687.986:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=692 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:08 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(0x0) r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:08 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x1000000}}], 0x30) 05:58:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1054}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='\xb2\xe1FZ\xf6\xff\xff\x13\x00', 0x2a) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000100)) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) 05:58:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x5, 0x400) bind$bt_sco(r1, &(0x7f0000000180)={0x1f, {0x7ff, 0x0, 0x100000, 0x1000, 0x9, 0x6}}, 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0xfdef) 05:58:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:08 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x2000000}}], 0x30) [ 948.462458][ T26] audit: type=1326 audit(1556776688.849:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=933 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070759b17f6a0b83259ff2999d9713c9738d4fb2d06ca1a89e95d047f27dbdac0b57c270bf7336f311c989f1bb1eb22fa9b4ee2d5168ce3d15613eba4c837f56532018731c7b8f1dfd27f03332bab0106000000bdd1df0200527cfed101846d0c87e81d5d1271da37358cf6de48b028a7658a2631f82daa7fe07de144f2bf9ebcc2f15961ea11ec40f134a30f6aba56deb602bae53e09474694d7cdab584487bf96e82545c4ab83f656309542cd615679fad42f8476ceced7c1e974fe229c7fdfcc3db18783810db3c40011aee054aaa45737418bc62cec077608d137e0bdaa7daaeedf0857698310ab53c5734b2266589e906503384ccc5215264ed34246f41a52c7c1534f006cd3ddcac1f12cbe168f04d55083f8d7156d5368d46ed6432f5045910e5162575449744ef7a25249aefc5cd9db34d6c4f5e9") r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000240)=""/253) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x1000005, 0x1ff, 0x4}, 0x10) 05:58:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x3000000}}], 0x30) 05:58:09 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5410}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2f, 'c\x86\xdd', 0xfdeb}]}, 0x5) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/6) 05:58:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x201, 0xe5c1, 0xfb, 0x40, 0x8, @random="7c0b253a8420"}, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000100)={{0x3, @rose}, [@rose, @null, @remote, @bcast, @null, @rose, @rose, @netrom]}, &(0x7f0000000180)=0x48) setsockopt$ax25_int(r2, 0x101, 0xb, &(0x7f00000001c0)=0x1f, 0x4) r3 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0xfffffffffffffff8, 0x240002) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000002c0)) bind$llc(r1, &(0x7f0000000000), 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000300)={'broute\x00'}, &(0x7f0000000380)=0x78) 05:58:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x3000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x4000000}}], 0x30) 05:58:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x5000000}}], 0x30) [ 949.349111][ T26] audit: type=1326 audit(1556776689.731:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1289 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 949.349128][ T1293] device nr0 entered promiscuous mode 05:58:09 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:09 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x8000000}}], 0x30) 05:58:10 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:10 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x42000000}}], 0x30) 05:58:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in=@local}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x13], 0x1, 0xe2, 0x1a, 0x6, 0x1, 0x0, {0x3, 0x5, 0x4, 0x81, 0x100, 0x80, 0x80, 0x7fff, 0xe82b, 0x6, 0x6, 0x400, 0x5, 0xd9b, "6e5479f63ca695c7c627f258d56d0f4c7160fb12d4351e94cc0b906d9084df61"}}) 05:58:10 executing program 4: r0 = shmget(0x0, 0x4000, 0x78000000, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x800) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000100)={0x1, @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0063a5ddeb"], 0xfdef) 05:58:10 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 950.217961][ T26] audit: type=1326 audit(1556776690.584:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1659 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:10 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:10 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x80ffffff}}], 0x30) 05:58:10 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x81ffffff}}], 0x30) 05:58:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = dup3(r0, r0, 0x80000) write$evdev(r1, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x0, 0x100, 0x2}, {{0x0, 0x7530}, 0x14, 0x7f, 0x8}, {{0x0, 0x7530}, 0x17, 0x2, 0x7b4}, {{0x0, 0x7530}, 0x1f, 0xd0b, 0xfffffffffffffffb}, {{}, 0x17, 0x3, 0x1ff}, {{0x77359400}, 0x14, 0xffffffffffffff72, 0x5f09fc49}, {{}, 0x1f, 0x1d4a1404, 0x7}], 0xa8) r2 = syz_init_net_socket$llc(0x1a, 0x800003, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000300)={@rand_addr="124c952098af75f3d2448902e532f4ae", r3}, 0x14) bind$llc(r2, &(0x7f0000000000), 0x10) 05:58:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="006386ddebc4932ecd25aae686b8c57fddf465b13acc9383f9a29ea33b1cb0189353cf16389b084cf3d57277ff78e43ad71d6375bf81024299bc5caa04b7162006b5c26445519658d6cfe46de42398d2693cd85298bf8c5360a32b2df7c08313549b4fe097b9a630b5aa7a67de0dc53e7e290a50"], 0xfdef) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xc8, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x40000) [ 950.510428][ T1873] device nr0 entered promiscuous mode 05:58:11 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="470f52e94a2be93699980f053ef3aec4a37bf0c50241e2e9450fe36a09c462f1920cbcc4027d30ef420f5a1ea35500262ff3906646da4e329200d2dec461dc55b13e410f3809132525000e818f470f94c967450f289369000000b100673e66470f0fa21900000090853665f3490f2cf18fe97c810f69e08f4cbec5c4c2858c3f8f56388d2b0000000f01d4dfc5497dbfed304715156f2a37ad59438f34b267f36ab4c4c2e9adc2564105ba16f2ae263ef367650f0fb30080000094c4c29d962150386c6cb3f9b3f9491feefe8f08e4a25600b1500909660fdf530967410f58d1e289e2897474e4b6c1f0433e660feee4440f704eee9846dec43b7d0f12e400f4c4617be6d2c4017a7fc3c4c1225cf909912af3430f47bb00000000000045126d6d8450000000c44299deb76a5babb9c421f9e759003e65660f5cb54c0a0000dd4805c462a52b6e0b8fa810ecd6091a1af20fa576acffff65d085431fe720bd7c6d83004577cbf043806d040ef4b0f43ef3430faedf1002970606b2aa8fa8689fb900100002dac422e6912cb18374fb0a0766440fe5bf2c470000f247acc4a2dd910cb1ed36660f38058b976192361d09f4f5e5978847915e02c1045c0b47cc47cc5c389f9f060f0f2ef217640f28006c6c01a9bb000042d8fb4974ec0b31c422358c083422") r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008902, &(0x7f0000000080)="0adc1f923c123f319bd070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)={r2, 0x4}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r3, &(0x7f0000000000), 0x10) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs(r4, &(0x7f0000000200)='net/fib_triestat\x00') 05:58:11 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x92ffffff}}], 0x30) 05:58:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x3, 0x1f, "5bcef31a17e44610c2f2cea589928d314eaebd0e453a238c1ec997e94c3aa2"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200080, 0x0) setsockopt$llc_int(r2, 0x10c, 0xf, &(0x7f0000000180)=0x9, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:58:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:11 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x93ffffff}}], 0x30) 05:58:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) [ 951.077026][ T26] audit: type=1326 audit(1556776691.437:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1985 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 951.110402][ T1983] device nr0 entered promiscuous mode 05:58:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:11 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x94ffffff}}], 0x30) 05:58:12 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0xc00000000000, 0x40000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x8, [0xdf0, 0x388a, 0x6, 0x3ff, 0x1, 0x1f, 0x8, 0x6]}, &(0x7f0000000100)=0x14) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x30b, 0x100, 0x3f, 0x8000, 0x8000, @dev={[], 0x1c}}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) write(r0, &(0x7f0000000180)="796eebce317ceaf1e5c4b1a9995de4b9", 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) 05:58:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xbf000000}}], 0x30) 05:58:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000140)={0xfffffffffffffffd, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:58:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xe00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xfdffffff}}], 0x30) [ 951.958641][ T26] audit: type=1326 audit(1556776692.320:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2223 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:12 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xfeffffff}}], 0x30) 05:58:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 05:58:13 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x80) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = fcntl$getown(r1, 0x9) move_pages(r2, 0x2, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000140)=[0x633f, 0xfffffffffffffffe, 0x5, 0x174af6e, 0x1, 0x3, 0x2, 0x4, 0x40], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000040)=0x12, 0x4) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x9) 05:58:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x3f00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xffffff80}}], 0x30) 05:58:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x20a000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xffffff81}}], 0x30) 05:58:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x808, &(0x7f0000000180)="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") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x6000000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 952.846134][ T26] audit: type=1326 audit(1556776693.202:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2567 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 952.868546][ T2577] device nr0 entered promiscuous mode 05:58:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:14 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xffffff92}}], 0x30) 05:58:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xde03000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:14 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="470f52e94a2be93699980f053ef3aec4a37bf0c50241e2e9450fe36a09c462f1920cbcc4027d30ef420f5a1ea35500262ff3906646da4e329200d2dec461dc55b13e410f3809132525000e818f470f94c967450f289369000000b100673e66470f0fa21900000090853665f3490f2cf18fe97c810f69e08f4cbec5c4c2858c3f8f56388d2b0000000f01d4dfc5497dbfed304715156f2a37ad59438f34b267f36ab4c4c2e9adc2564105ba16f2ae263ef367650f0fb30080000094c4c29d962150386c6cb3f9b3f9491feefe8f08e4a25600b1500909660fdf530967410f58d1e289e2897474e4b6c1f0433e660feee4440f704eee9846dec43b7d0f12e400f4c4617be6d2c4017a7fc3c4c1225cf909912af3430f47bb00000000000045126d6d8450000000c44299deb76a5babb9c421f9e759003e65660f5cb54c0a0000dd4805c462a52b6e0b8fa810ecd6091a1af20fa576acffff65d085431fe720bd7c6d83004577cbf043806d040ef4b0f43ef3430faedf1002970606b2aa8fa8689fb900100002dac422e6912cb18374fb0a0766440fe5bf2c470000f247acc4a2dd910cb1ed36660f38058b976192361d09f4f5e5978847915e02c1045c0b47cc47cc5c389f9f060f0f2ef217640f28006c6c01a9bb000042d8fb4974ec0b31c422358c083422") memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xfdef) 05:58:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 953.705237][ T2823] device nr0 entered promiscuous mode 05:58:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:14 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xffffff93}}], 0x30) [ 953.772175][ T26] audit: type=1326 audit(1556776694.115:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2828 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:14 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xffffff94}}], 0x30) 05:58:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x140, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000140)={r0, r1, 0x80000000, 0x49, &(0x7f00000000c0)="d8b7d53bb757bf5eabeaab1071234391677b1a384ca3df131a0910e245145d15884636620d2d312a9fa86ec0088862fe584ec410aedbe1cdfaf5e4ddc480c0212dd82b74917eb57b82", 0x4, 0x1, 0xffffffff, 0x9, 0x9, 0x2, 0x7, 'syz0\x00'}) 05:58:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x54100000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 954.178053][ T2823] device nr0 entered promiscuous mode 05:58:14 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, 0x0, 0x0, 0x0, 0x1000) 05:58:14 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xfffffffd}}], 0x30) 05:58:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00\x00\x00\x00\x00\x00\x00\x10\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000003e0081", 0x7}], 0x1}, 0x44080) r1 = socket$kcm(0x29, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) prctl$PR_SET_UNALIGN(0x6, 0x2) getresuid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)) 05:58:15 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xfffffffe}}], 0x30) 05:58:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 954.668716][ T26] audit: type=1326 audit(1556776694.997:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3082 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") io_setup(0x543, &(0x7f00000000c0)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3, 0x40000) bind$llc(r1, &(0x7f0000000000)={0x1a, 0xfffffffffffffffd, 0xfffffffffffffffc}, 0xfc5e) 05:58:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:15 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x100000000000000}}], 0x30) 05:58:15 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, 0x0, 0x0, 0x0, 0x1000) 05:58:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x10000) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x400, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0xfffffffffffffe30}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x9, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:58:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:15 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x200000000000000}}], 0x30) 05:58:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f00000000c0)="0adc1f123c123f319bd0705873c37744695a4199f4623183ab935a548b326fda6619104e0e90b04470802d4528fbf2a6") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 955.544812][ T26] audit: type=1326 audit(1556776695.870:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3479 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:15 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x300000000000000}}], 0x30) 05:58:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x7) 05:58:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xe}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:16 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, 0x0, 0x0, 0x0, 0x1000) 05:58:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x400000000000000}}], 0x30) 05:58:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x38000000, 0x80000) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000140)) socket$kcm(0x29, 0x5, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000327bd7000fbdbdf250100060000000501080002000a0000000800010046230000080002000a0000000800e857030000007965bb4f5a5d88c9da1c82cffa277a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) getsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000480)=""/79, &(0x7f0000000200)=0x4f) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000340)={0x6, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000a40)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:58:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tu\x01\x000\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x60}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x500000000000000}}], 0x30) 05:58:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 956.442437][ T26] audit: type=1326 audit(1556776696.762:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3824 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:16 executing program 1: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x800) syncfs(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) 05:58:16 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x800000000000000}}], 0x30) 05:58:17 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 05:58:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003e0081", 0x7}], 0x1000000000000081}, 0x0) r1 = socket$kcm(0x29, 0x42, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000340)="0500932b49e7c4a1c3738dc0d5f2e9f637b795852debc18b58576d39d705d6e54b0fefcb6a070f72152b2daf0e06782ceb73f75365dc3e04ae8ac4e1ce7e2aa94b7953f9f9ab0f52fe6857391306a6e6250eeff2b8b2b16c8ad0ca097420bea1a55111818a5edae14f613e4000e4ef1104de2925ada4b7982ac42fe73bdd1f1240a56eb8c308a4684e433f28b95edacbb55d53c683f47211aa44a6717ed487aba0cc44844ef322b7c9ac7aeee67170cea6b1de", 0xb3}, {&(0x7f0000000400)="d45ff32046eea09cc7c11f1bd7f5dc535717dc86f14d637819a460d6e9b3aaa043ed87e4b148446b0dd3ed86d770d143896f23dc25c0c323cdcb4b25f4d9f8392cd43eab5b9926026cf15ed260d24d10f4a7cfc99a648bbdc96bcf88cf4e52c45a01ccb73a0522c224a1c11753a1724b2ab47ac5e1e1962dd789cf18a04c6dd5cca09d58de7c0b0f6c91ba9c141da0345f72f431af1ae7828563412b91fddbe7527fbfb513342fff55ddf82998e1ddbdd44c897e2c5c7667274d25e1fdf9e9abfc65ca0ee9f1ef1778e1c8ccc81aa4df70f3feb14e27ef057560a0e1639036ac", 0xe0}, {&(0x7f00000006c0)="90fdf9a4b5ae0a7de2f2ba9e0398f0149d109d7e32bd8955b0210c3a3c3a21857af8b06a5ca47d0845d75f27ebabb5447ec65dad7849d8906863e633a2e56b2ad0aa670a44f7451e39a6447a11b7b54a3c07237faa22d6564453f2deb43dc75db81988b50cd8564f801c2868aaecdaab2b78c1cad0bd4270192fcb95413b37483203d2bea904ecb795ae705e3ed43c3ce417ab2a1112362cf0fdbf266f0f43f59ba8d3d7369cddf928b123b7e934af85a7599139b8c03c07cef01f3cce9e6dbdfe5fe31a78358a64d556dbe59f8816f24d75e92619f58d948eafc5cd9f492da4f7b703614d4c725d15ad6700f81e1291f8bdf7f867446355", 0xf8}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="e082f32e0bcef838c53a5ab7fc896c7269b3346ca4e5cbb5d0a712b1c6e997df68c4f31ce467b0835b625c52d347c7c7a2e963931a59b68d69efc7b46884787be928f5c72f32f12a5f5db006d756423229e400d4a4730b3348834e6b58cdb6b474c2719421d71cfb5270a3dd8938966284a0f0", 0x73}], 0x5, &(0x7f00000018c0)=[{0xc8, 0x13f, 0x8, "ee12a4a7f4228e1fd311e0b0027b1a1dd55b029e025d4bcf715c8a0f39697667fd5ceafb9527bb2d7918aa4060bbecc11e7f2cf491a7b663bd08d54770da3e5c50f38f35ebf5dc90cf7a9b4dd8d4b09591463c57e342dd22d4abca5b38eb886cb16db80b7e5b585070666fd67efc47ce3f9e75e628b7451202e40210de8ed63af7f97f93264c05e554c1f1c1a646735f322bcd1505268d3f337852a6152bf80253b6c5a6cf7ecf8030046e5588f781b8fcda58b6a2638815"}, {0xc0, 0x10b, 0x8, "3cea356c234a54cb004e29bd68f15d84e54dd98da9e5babb0c885b1f23a7e26de3506f8c79f1c9a501c3fbdd79087bffaeb43039bc2f930f8ef91eadeb9c5d043637b990c12af5fc9964454dff626e145a5b6ae7b62d0a5d630871f7b3a77b8a89126e16d556ce072b477ba777e648bb32b1b1c6553fdc5209db8912ebaebaaeaa43c3aedf5d5d5bc4f8413b42420f65363b3079372d049279d5e5f9175b1ae52057d59f95320a078e9909845d85"}, {0xc0, 0x0, 0x71, "8c83bd9f1eaf45bdd55db0e2574e6b7bffb9c3ee16b9df230301dca81ebcd43b1adb0d0ef47cec6c0af9ab20c9b9d0cee255d4005d434c51e74424f2afb693af5b0193b860401fd8e13e151c13645a1b222458036a2e08df0d504dc9405e3c3ee1d01cec74c055bdaa873444a66f262d763c908cc78dae22b4f8823d3fdb61846a88eefa5d702c8209178c8b8f775ad630e2814005f61391a02781442aaf6d78828d3a142e945f3eb9b91b"}], 0x248}, 0x20000000) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="006386ddeb254dce8334ef82255605b3063998df17aae1eda76f6db6abdcf6eb4f37120389f2ea05229b1df45c916cf3068f833babe868219e8be8be87b2ae1793f2b6c7eaf17f31cc3c65878af707ca98418ea1bd217de9a8c79042baba7cfc502fb12d9466d780a37e02f3ccf70db3e802a90f55c7b5ed47ffcdb14c357c76330d399e2680b061cbe1e58aa517bfd8ad10cf48480f3dc5911412f32376bde07e2c7ad8d05bc66716725cb423713766b6c88256cd1b6ee2f93eee953d63f549b5898435f6338fb2b3aed7eccd6531aabad57eba5c6ac3"], 0xfdef) 05:58:17 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x4200000000000000}}], 0x30) 05:58:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x100, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000000c0)={0x1, 0x685}, 0x2) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x3de}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 957.338601][ T26] audit: type=1326 audit(1556776697.645:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4164 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:17 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x80ffffff00000000}}], 0x30) 05:58:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x5) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x500, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f00000000c0)={0x1}) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x81, 0x208041) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)=0x0) r4 = fcntl$getown(r2, 0x9) kcmp(r3, r4, 0x4, r0, r2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00630000eb"], 0xfdef) 05:58:18 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 05:58:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x81ffffff00000000}}], 0x30) 05:58:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xe00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890f, &(0x7f0000000080)="00ffe9543d3f5ae61e618200001f00"/32) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x92ffffff00000000}}], 0x30) 05:58:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x4) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:18 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 958.290294][ T26] audit: type=1326 audit(1556776698.597:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4502 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:58:18 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x93ffffff00000000}}], 0x30) 05:58:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 958.467124][ T4632] device nr0 entered promiscuous mode [ 958.696009][ T4632] device nr0 entered promiscuous mode 05:58:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', r1}) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000140)=0x5, 0x4) bind$llc(r2, &(0x7f0000000000), 0x10) 05:58:19 executing program 3: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0) 05:58:19 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0x94ffffff00000000}}], 0x30) 05:58:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x6000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$inet6(0xa, 0x3, 0x3f) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x3ff800, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003e0081", 0x7}], 0x1}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c\x86\xdd', 0xfdeb}]}, 0xfdef) 05:58:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)='posix_acl_accesstrusted}]\x00', 0xffffffffffffffff}, 0x30) sched_getparam(r2, &(0x7f0000000280)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10120004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x4, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xde03}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:19 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xbf00000000000000}}], 0x30) [ 959.175699][ T4838] device nr0 entered promiscuous mode [ 959.196843][ T26] audit: type=1326 audit(1556776699.500:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4839 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:19 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:19 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xfdffffff00000000}}], 0x30) 05:58:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x30000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xfeffffff00000000}}], 0x30) 05:58:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1f, 0x84000) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000140)=0x5) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x74d942, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:20 executing program 4: seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000001200)="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") clone(0x210007f5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:20 executing program 3: clone(0x210007f5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e000000100000000000000000000000000081000000000000000001000000000000000038"], 0x37) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 960.079152][ T26] audit: type=1326 audit(1556776700.372:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5076 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{}, 0xffffffff00000000}}], 0x30) 05:58:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffffffffffe1, 0x101000) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:20 executing program 3: r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e000000100000000000000000004000000000000000000000eeff0000000000000000003800b5"], 0x39) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x3) 05:58:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) 05:58:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 960.885598][ T26] audit: type=1326 audit(1556776701.166:70): auid=4294967295 uid=1048825462 gid=0 ses=4294967295 subj==unconfined pid=5076 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:21 executing program 4: shmget(0xffffffffffffffff, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 05:58:21 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20400, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="880848923eff7678e179b51deaa777c523d69c545c91fa48006639ce", 0x1c, 0x4080, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, r1, 0x30, 0x1, @in6={0xa, 0x4e21, 0x800, @mcast2, 0x2}}}, 0xa0) r2 = socket$inet(0xa, 0x3, 0xb) r3 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0xa010003) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r4, 0x0, 0x1, &(0x7f0000000240)='\x00', 0xffffffffffffffff}, 0x30) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000300)='ns/pid\x00') setns(r6, 0x8000000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty=0x600, 0x0, 0x6000000, 'lblcr\x00', 0x4, 0x0, 0x43}, 0x2c) fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000001340)="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") r8 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000180)=0xfffffffffffffff5) setreuid(r7, r9) clone(0x8000, 0x0, 0x0, 0x0, 0x0) connect$inet(r8, &(0x7f0000001540)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x2) r10 = accept4(r2, 0x0, 0x0, 0x0) write(r10, &(0x7f00000001c0)="c9", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x398) shutdown(r10, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000340)=""/4096, &(0x7f0000000140)=0x1000) socket$kcm(0x10, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 05:58:21 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x20000070) 05:58:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5410000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = accept(r0, 0x0, &(0x7f0000000080)) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) 05:58:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) 05:58:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/full\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000380)='./file0\x00', 0x0, 0x4c83a6916d58a842}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001740)={0x1, 0x3, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000004c0)={0x0, 0x40000009, 0x9, {0x0, 0x989680}, 0x40, 0x7}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000001780)={0x0, 0xfffffffffffffe00, 0x7fffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, 0x0, 0x4000000) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x6000, 0x0, {0x4}}, 0x14}}, 0x0) 05:58:21 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:21 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$capi20_data(r0, &(0x7f0000000340)={{0x10, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x81, &(0x7f00000000c0)=0x0) io_getevents(r1, 0x6, 0x0, &(0x7f00000001c0), 0x0) 05:58:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) 05:58:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:24 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000080), 0x7e94076a33737ec7) 05:58:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:24 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote={{0x0, 0x2000000}}}], 0x30) 05:58:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000840)='/dev/vbi#\x00', 0x1, 0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x3, 0x4f8, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000240), &(0x7f0000000980)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000001100000009000000ed7d74756e6c30000000000000000000000076657468305f746f5f687372000000007465616d5f736c6176655f31000000007663616e3000000000000000000000004e80201fb3e2ff0000ffffffaaaaaaaaaaaaffffff0000ff0000d0010000d001000008020000636f6d6d656e740000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008ac9374bce5ebaa37a6e05a0174d0b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bee102155f5fdc95000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007265616c6d000000000000000000000000000000000000000000000000000000100000000000000003000000ffffffff0100000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa0000ffffffff00000000190000000300000088f762707130000000000000000000000000696662300000000000000000000000006e72300000000000000000000000000076657468315f746f5f627269646765000180c200000e00ff00ffffff00000000000000ff0000ff000000e00000001801000050010000737461746500000000000000000000000000000000000000000000000000000008000000000000000800000000000000636f6e6e6279746573000000000000000000000000000000000000000000000018000000000000000101000000000000030000000000000001020000000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000010000ffffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa120000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff01000000090000004400000088e776657468305f746f5f6272696467650076657468305f746f5f6873720000000069726c616e3000000000000000000000766c616e300000000000000000000000b5a2aa7caea8ffff00ff00ffffffffffffff00ff00ffff00000070000000a8000000e00000006172707265706c79000000000000000000000000000000000000000000000000100000000000000093baf7e032cc0000fdffffff000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000018d447e4be9a119ac28ce6a92508cd51f879027d3d12485e3a75d78a8db6d0b0e23de83b89aa614ee6d3436942b05c7b1c0401d50425d84a21e71cb45bc65f35856718ae88ccf92f0c7dd823b4df2a20289fd707b8e695a41a19f09a5aec64c9fa2"]}, 0x5d1) r2 = syz_init_net_socket$llc(0x1a, 0xfffffffffffffffd, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b6d0fceb8c3e226271ad21110320fedbc1771f93974f1b32ef8d457ab4c60ed13e7368dc5f69a491368afedda64b026646d4b703669ad0dbfff00c98972db1b2e35e3a2a9b49a762cc32ec9b079fb2a49edfbcf95bfd3cdfc096763e0e046c77793943a3a323fc028da8dd867126ff2803bb95c4ff38dc5858d4c7a3db", @ANYRES16=r4, @ANYBLOB="000029bd7000fedbdf250100000008000500030000000800040006000000080003000800000008000600be00000008000600fd000000140001000000000000000000000000000000000114000100ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x1) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000800)=""/46) bind$llc(r2, &(0x7f0000000000), 0x10) 05:58:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/full\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000380)='./file0\x00', 0x0, 0x4c83a6916d58a842}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001740)={0x1, 0x3, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000004c0)={0x0, 0x40000009, 0x9, {0x0, 0x989680}, 0x40, 0x7}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000001780)={0x0, 0xfffffffffffffe00, 0x7fffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, 0x0, 0x4000000) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x6000, 0x0, {0x4}}, 0x14}}, 0x0) 05:58:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:24 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x4, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) lseek(r0, 0x0, 0x0) 05:58:24 executing program 3 (fault-call:3 fault-nth:0): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x10000, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x800, @null, @netrom={'nr', 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @default, @null, @null]}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000380)='security.SMACK64TRANSMUTE\x00', &(0x7f00000003c0)='TRUE', 0x4, 0x3) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x1, {0x9, 0x100000001, 0x5, 0x7b5, 0x1f, 0x3, 0x4000000000000, 0xfffffffffffeffff}}, 0x43) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000240)={0x7, @raw_data="d6a5bae6999e7377c9390d4e631ce1f2fbc9bc9b4a5dc5b2cc7256ef3dde1bf7e3c1e138aa72f28e07bd6e5b3af9043354f54a15c1e119aa121b53571cb3a8f547a48570a1d6edec79486dfd57335313b0d1f7a028fc14387b82c3f68233af1fc957991d88cc71b716317ce619932d781a27687b3934b37f33c49c8ff9188d8eaf8b509a93d7f725620cd80618e4f9b23a1cf229aa38e1efdfe6863484787e7c557c4b93c02970aef992568f6a1023e624ef57caedd86bb7d574546ab85c628b73a8e3ed12af16bc"}) bind$llc(r2, &(0x7f0000000340)={0x1a, 0x8000000000000000, 0x0, 0x0, 0x8}, 0x9) 05:58:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 964.621504][ T26] audit: type=1326 audit(1556776704.875:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6094 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 964.656815][ T6102] FAULT_INJECTION: forcing a failure. [ 964.656815][ T6102] name failslab, interval 1, probability 0, space 0, times 0 [ 964.700224][ T6102] CPU: 1 PID: 6102 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 964.708177][ T6102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 964.708183][ T6102] Call Trace: [ 964.708206][ T6102] dump_stack+0x172/0x1f0 [ 964.708228][ T6102] should_fail.cold+0xa/0x15 [ 964.708255][ T6102] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 964.708275][ T6102] ? ___might_sleep+0x163/0x280 [ 964.708294][ T6102] __should_failslab+0x121/0x190 05:58:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 964.736659][ T6102] should_failslab+0x9/0x14 [ 964.736679][ T6102] kmem_cache_alloc+0x2b2/0x6f0 [ 964.746433][ T6102] ? ksys_write+0x1f1/0x2d0 [ 964.746456][ T6102] getname_flags+0xd6/0x5b0 [ 964.746479][ T6102] ? do_syscall_64+0x26/0x610 [ 964.755795][ T6102] __x64_sys_execveat+0xd4/0x130 [ 964.755814][ T6102] do_syscall_64+0x103/0x610 [ 964.755835][ T6102] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 964.755846][ T6102] RIP: 0033:0x458da9 05:58:25 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), 0x0) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917}, 0x0) unshare(0x40000000) socket$xdp(0x2c, 0x3, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x81, 0x0, @tick, {0x5, 0x80fffff0}, {0x3}, @quote}], 0x30) [ 964.755869][ T6102] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 964.764825][ T6102] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 964.764840][ T6102] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 964.764849][ T6102] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 964.764857][ T6102] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 05:58:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 964.764866][ T6102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 964.764873][ T6102] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2) 05:58:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/full\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000380)='./file0\x00', 0x0, 0x4c83a6916d58a842}, 0x10) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001740)={0x1, 0x3, 0x2, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000004c0)={0x0, 0x40000009, 0x9, {0x0, 0x989680}, 0x40, 0x7}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) write$P9_RFSYNC(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') write$FUSE_NOTIFY_STORE(r1, 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, &(0x7f0000001780)={0x0, 0xfffffffffffffe00, 0x7fffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, 0x0, 0x4000000) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x22, 0x1, 0x6000, 0x0, {0x4}}, 0x14}}, 0x0) 05:58:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 965.054431][ T6367] IPVS: ftp: loaded support on port[0] = 21 05:58:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:25 executing program 3 (fault-call:3 fault-nth:1): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="470f52e94a2be93699980f053ef3aec4a37bf0c50241e2e9450fe36a09c462f1920cbcc4027d30ef420f5a1ea35500262ff3906646da4e329200d2dec461dc55b13e410f3809132525000e818f470f94c967450f289369000000b100673e66470f0fa21900000090853665f3490f2cf18fe97c810f69e08f4cbec5c4c2858c3f8f56388d2b0000000f01d4dfc5497dbfed304715156f2a37ad59438f34b267f36ab4c4c2e9adc2564105ba16f2ae263ef367650f0fb30080000094c4c29d962150386c6cb3f9b3f9491feefe8f08e4a25600b1500909660fdf530967410f58d1e289e2897474e4b6c1f0433e660feee4440f704eee9846dec43b7d0f12e400f4c4617be6d2c4017a7fc3c4c1225cf909912af3430f47bb00000000000045126d6d8450000000c44299deb76a5babb9c421f9e759003e65660f5cb54c0a0000dd4805c462a52b6e0b8fa810ecd6091a1af20fa576acffff65d085431fe720bd7c6d83004577cbf043806d040ef4b0f43ef3430faedf1002970606b2aa8fa8689fb900100002dac422e6912cb18374fb0a0766440fe5bf2c470000f247acc4a2dd910cb1ed36660f38058b976192361d09f4f5e5978847915e02c1045c0b47cc47cc5c389f9f060f0f2ef217640f28006c6c01a9bb000042d8fb4974ec0b31c422358c083422") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x4, 0x4000) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000100)={0xfffffffffffffffe, 'syz0\x00'}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self\x00', 0x0, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x3b46, 0x2000000000000000, @dev={[], 0x2a}}, 0x10) 05:58:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 965.480129][ T26] audit: type=1326 audit(1556776705.727:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6646 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 965.541345][ T6648] FAULT_INJECTION: forcing a failure. [ 965.541345][ T6648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 965.554589][ T6648] CPU: 0 PID: 6648 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 965.562478][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 965.562484][ T6648] Call Trace: [ 965.562508][ T6648] dump_stack+0x172/0x1f0 [ 965.562532][ T6648] should_fail.cold+0xa/0x15 [ 965.562552][ T6648] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 965.562574][ T6648] ? __lock_acquire+0x548/0x3fb0 [ 965.562584][ T6648] ? find_held_lock+0x35/0x130 [ 965.562601][ T6648] should_fail_alloc_page+0x50/0x60 [ 965.562614][ T6648] __alloc_pages_nodemask+0x1a1/0x8d0 [ 965.562630][ T6648] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 965.562640][ T6648] ? find_held_lock+0x35/0x130 [ 965.562659][ T6648] ? kasan_check_write+0x14/0x20 [ 965.562674][ T6648] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 965.576286][ T6648] cache_grow_begin+0x9c/0x860 [ 965.576304][ T6648] ? getname_flags+0xd6/0x5b0 [ 965.576320][ T6648] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 965.576340][ T6648] kmem_cache_alloc+0x62d/0x6f0 [ 965.585222][ T6648] ? ksys_write+0x1f1/0x2d0 [ 965.585244][ T6648] getname_flags+0xd6/0x5b0 [ 965.585259][ T6648] ? do_syscall_64+0x26/0x610 [ 965.585280][ T6648] __x64_sys_execveat+0xd4/0x130 [ 965.585303][ T6648] do_syscall_64+0x103/0x610 [ 965.596014][ T6648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 965.596026][ T6648] RIP: 0033:0x458da9 [ 965.596040][ T6648] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 965.596048][ T6648] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 965.596077][ T6648] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 965.596086][ T6648] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 965.596094][ T6648] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 965.596104][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 965.596121][ T6648] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:27 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000080)={0x0, {0x77359400}, 0x1, 0xa3}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0xff, @tick, {0x5, 0x80fffff0}, {0x0, 0x1}, @quote}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000000c0)={0xf0, 0x4, 0xffffffff, 'queue1\x00', 0x100000000}) 05:58:27 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x101000, 0x150) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000980)='/dev/snapshot\x00', 0x400000, 0x0) dup3(r0, r1, 0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x4, 0x4, 0x1774, 0x0, 0xffffffffffffff9c, 0x0, [0xd]}, 0x3c) getpeername$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r4, 0x2, &(0x7f0000000080)=""/91) 05:58:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 05:58:27 executing program 3 (fault-call:3 fault-nth:2): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xde030000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 967.576130][ T26] audit: type=1326 audit(1556776707.810:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6763 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 967.623519][ T6801] FAULT_INJECTION: forcing a failure. [ 967.623519][ T6801] name failslab, interval 1, probability 0, space 0, times 0 [ 967.688675][ T6801] CPU: 1 PID: 6801 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 967.696696][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.696703][ T6801] Call Trace: [ 967.696727][ T6801] dump_stack+0x172/0x1f0 [ 967.696750][ T6801] should_fail.cold+0xa/0x15 [ 967.696768][ T6801] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 967.696789][ T6801] ? ___might_sleep+0x163/0x280 [ 967.696807][ T6801] __should_failslab+0x121/0x190 [ 967.696822][ T6801] should_failslab+0x9/0x14 05:58:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:28 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000080)={0x4, 0x0, 0x4}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) [ 967.696837][ T6801] kmem_cache_alloc+0x2b2/0x6f0 [ 967.696853][ T6801] ? save_stack+0xa9/0xd0 [ 967.696870][ T6801] dup_fd+0x85/0xb30 [ 967.696890][ T6801] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 967.758284][ T6801] unshare_fd+0x160/0x1d0 [ 967.758301][ T6801] ? set_max_threads+0xe0/0xe0 [ 967.758316][ T6801] ? find_held_lock+0x35/0x130 [ 967.758331][ T6801] ? cache_grow_end+0xa4/0x190 [ 967.758350][ T6801] unshare_files+0x7f/0x1f0 [ 967.781406][ T6801] ? __ia32_sys_unshare+0x40/0x40 05:58:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 967.786447][ T6801] __do_execve_file.isra.0+0x27e/0x23f0 [ 967.792006][ T6801] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 967.798265][ T6801] ? __phys_addr_symbol+0x30/0x70 [ 967.803291][ T6801] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 967.809025][ T6801] ? __check_object_size+0x3d/0x42f [ 967.814223][ T6801] ? copy_strings_kernel+0x110/0x110 [ 967.819505][ T6801] ? strncpy_from_user+0x2a8/0x380 [ 967.824613][ T6801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 967.830836][ T6801] __x64_sys_execveat+0xed/0x130 [ 967.835753][ T6801] do_syscall_64+0x103/0x610 [ 967.840324][ T6801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 967.846193][ T6801] RIP: 0033:0x458da9 [ 967.850078][ T6801] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 967.869659][ T6801] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 967.878071][ T6801] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 05:58:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x100003e, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0xa) [ 967.886021][ T6801] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 967.893977][ T6801] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 967.901930][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 967.909904][ T6801] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:28 executing program 4: pause() r0 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x1) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e1a5f97300660f3a8e16649c675100617b12e5c441dfd04b00c442019dccd211d46f") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000100)="c4e3f9614832074a2be93699980f053ef3aec4a37bf0c50341e2e9c403ed6ec9e6f2abc421b8c25cb100008d3581810000262f7946d9f96646da4e32c4c2b9b6b90000000000d2dec461c44299ae4000e61713242500c18181470f9080008047f03acf8fe97c810f69e08f4cbec5c4c2858c3f2d56c4613fc21d9053c7ab86c4213e5377000043d9497d410fa9a642857e00c3c30f3a603d06f0ffff00c4e16d71d4d2564105ba16f2aed9fd01eba18f8fa225adeab413c4c37d096208c2c481fa706b00f9ef0008b32eb644ff1a19561da900e001f0428155fdd2cb0000c6d591c4021d47b5719e0000ffff66dee4b6c442f191497b8f49580197feffff7f4080a009210000df3b7d0f12e400f4260fe88c4200000000a8c46190410add6104f3451f337b6b0000912af3430fc4c17829c8c463ad0b5890ca6c0f8450000000470f4c37d8008fe978cce16a85856d6d8175ef9d8f00660f3830c8c462a52b6e0b84a17a423895f0f0839200000080a73498e798e7c3bd7c6d8300c4e17c512f77cb40c944e42ec4a17c10020f1541220606b2aa2466643e660f76e3c462b147546c0007c40155f64e06ec6868470afceb82e26263209797c1045c0b47cc5cc40341783b0064450fe242d9c481635a9c70d3813811fa174e484e40c91b41fcfc1b1b0fadd7663ef0430fabb90800000045ee880c0000003422") setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1c) 05:58:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101800, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x53db51c3, 0x1]}, 0x8) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000100)={0x3, 0x1, 0x7f, 0xfc8, 0x4, 0x3}) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0xfffffffffffffd65) bind$llc(r3, &(0x7f0000000000), 0x10) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000180)=0x2000000) 05:58:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:28 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x9, 0x1, 0x1a, 'queue0\x00', 0x1}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:28 executing program 3 (fault-call:3 fault-nth:3): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x100, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) connect(r0, &(0x7f00000000c0)=@sco={0x1f, {0x8, 0x8, 0x80, 0x1000, 0x1, 0x7}}, 0x80) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x404c534a, &(0x7f0000000100)={{}, 0x0, 0x1f00}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x410080, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000040)) 05:58:28 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) write$smack_current(r0, &(0x7f0000000080)='/dev/sequencer\x00', 0xf) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x4, 0x4) 05:58:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 968.468678][ T26] audit: type=1326 audit(1556776708.693:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7632 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:28 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) r1 = gettid() r2 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmat(r2, &(0x7f0000ffa000/0x4000)=nil, 0x1000) sched_rr_get_interval(r1, &(0x7f0000000080)) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x18) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) [ 968.529234][ T7877] FAULT_INJECTION: forcing a failure. [ 968.529234][ T7877] name failslab, interval 1, probability 0, space 0, times 0 [ 968.586905][ T7877] CPU: 1 PID: 7877 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 968.594880][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.604968][ T7877] Call Trace: [ 968.608289][ T7877] dump_stack+0x172/0x1f0 [ 968.612642][ T7877] should_fail.cold+0xa/0x15 [ 968.617254][ T7877] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 968.623081][ T7877] ? ___might_sleep+0x163/0x280 [ 968.627965][ T7877] __should_failslab+0x121/0x190 [ 968.632912][ T7877] should_failslab+0x9/0x14 05:58:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:28 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0xfffffffffffffd3e, 0x21, 0x2}, 0x7) write$vnet(r2, &(0x7f0000000080)={0x1, {&(0x7f0000000700)=""/4096, 0x1000, &(0x7f0000000000)=""/119, 0x3, 0x3}}, 0x68) sendfile(r0, r2, &(0x7f0000d83ff8)=0x3, 0x800000000024) 05:58:28 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8c00, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x8000, 0x1, 0x1000, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1, 0xbf, "6c28bbca2f91e6c00eab3af91234b997e89c2f084080ac26e869dc881bd9947b00c2ba5942ac376bfd101be13c1947236cb69d0ddeca8613b7640ba837039f7324c0138e8b31187793eadb4509abbc0706347dd26f97a298cb87faa59a1ca1a7f1e58cab7ac54078962de9a53e0d6d7bd5bc51446944c88a6cbcaaa8487766c9323c0e5899a9b0c3c2187b18009ce21f0f419a0af41a8e259a5ad3e7a28c0ac10805b83830f7b7deac1f9f0fcb1eb20309da95b2baa6924334e7e6a58375a4"}, &(0x7f0000000240)=0xc7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r3, &(0x7f0000000000), 0x10) [ 968.637433][ T7877] kmem_cache_alloc_trace+0x2d1/0x760 [ 968.642814][ T7877] ? lock_downgrade+0x880/0x880 [ 968.647676][ T7877] alloc_fdtable+0x86/0x290 [ 968.652190][ T7877] dup_fd+0x743/0xb30 [ 968.656187][ T7877] unshare_fd+0x160/0x1d0 [ 968.660525][ T7877] ? set_max_threads+0xe0/0xe0 [ 968.665295][ T7877] ? find_held_lock+0x35/0x130 [ 968.670070][ T7877] ? cache_grow_end+0xa4/0x190 [ 968.674825][ T7877] unshare_files+0x7f/0x1f0 [ 968.679418][ T7877] ? __ia32_sys_unshare+0x40/0x40 [ 968.684437][ T7877] __do_execve_file.isra.0+0x27e/0x23f0 [ 968.689974][ T7877] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 968.696199][ T7877] ? __phys_addr_symbol+0x30/0x70 [ 968.701212][ T7877] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 968.706910][ T7877] ? __check_object_size+0x3d/0x42f [ 968.712097][ T7877] ? copy_strings_kernel+0x110/0x110 [ 968.717394][ T7877] ? strncpy_from_user+0x2a8/0x380 [ 968.722838][ T7877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 968.729063][ T7877] __x64_sys_execveat+0xed/0x130 [ 968.733984][ T7877] do_syscall_64+0x103/0x610 [ 968.738558][ T7877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 968.744440][ T7877] RIP: 0033:0x458da9 [ 968.748330][ T7877] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 968.767919][ T7877] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 968.776330][ T7877] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 968.784280][ T7877] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 968.792239][ T7877] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 968.800191][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 968.808144][ T7877] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:29 executing program 3 (fault-call:3 fault-nth:4): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x3000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0xf) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:29 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f00000000c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, r0, 0x0, 0xf, &(0x7f0000000100)='/d\x93 \xaf\xf8g\x036\xd03\r\xd3\xc3t', 0xffffffffffffffff}, 0x30) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) setpriority(0x0, r2, 0x8) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:29 executing program 4: r0 = socket$inet_sctp(0x2, 0x200000020005, 0x84) accept(r0, 0x0, 0x0) 05:58:29 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) semget(0x2, 0x3, 0x114) 05:58:29 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x200082, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000100)={0x1f, 0x6, 0x19, &(0x7f00000000c0)="810916aa47f4582db9cb3991ce61d7e358071315e0f0d2e50f"}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000f514cc00000000000000586bb7452555a516d267050100000000"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x7a]}, 0x48) [ 969.338560][ T26] audit: type=1326 audit(1556776709.545:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8210 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 969.392145][ T8321] FAULT_INJECTION: forcing a failure. [ 969.392145][ T8321] name failslab, interval 1, probability 0, space 0, times 0 [ 969.414980][ T8321] CPU: 0 PID: 8321 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 969.422938][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 969.433003][ T8321] Call Trace: [ 969.436306][ T8321] dump_stack+0x172/0x1f0 05:58:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101500, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xeb, 0x20000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r1, r3}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) [ 969.440646][ T8321] should_fail.cold+0xa/0x15 [ 969.440667][ T8321] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 969.440690][ T8321] ? ___might_sleep+0x163/0x280 [ 969.455919][ T8321] __should_failslab+0x121/0x190 [ 969.460870][ T8321] should_failslab+0x9/0x14 [ 969.465391][ T8321] kmem_cache_alloc_node_trace+0x270/0x720 [ 969.471216][ T8321] __kmalloc_node+0x3d/0x70 [ 969.475730][ T8321] kvmalloc_node+0x68/0x100 [ 969.480236][ T8321] alloc_fdtable+0xd6/0x290 [ 969.484748][ T8321] dup_fd+0x743/0xb30 [ 969.488744][ T8321] unshare_fd+0x160/0x1d0 [ 969.488762][ T8321] ? set_max_threads+0xe0/0xe0 [ 969.488782][ T8321] ? find_held_lock+0x35/0x130 [ 969.502598][ T8321] ? cache_grow_end+0xa4/0x190 [ 969.507374][ T8321] unshare_files+0x7f/0x1f0 [ 969.511983][ T8321] ? __ia32_sys_unshare+0x40/0x40 [ 969.517049][ T8321] __do_execve_file.isra.0+0x27e/0x23f0 [ 969.522593][ T8321] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 969.522611][ T8321] ? __phys_addr_symbol+0x30/0x70 [ 969.522625][ T8321] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 969.522640][ T8321] ? __check_object_size+0x3d/0x42f [ 969.522661][ T8321] ? copy_strings_kernel+0x110/0x110 [ 969.522675][ T8321] ? strncpy_from_user+0x2a8/0x380 [ 969.522691][ T8321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 969.522709][ T8321] __x64_sys_execveat+0xed/0x130 [ 969.522729][ T8321] do_syscall_64+0x103/0x610 [ 969.522747][ T8321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 969.522762][ T8321] RIP: 0033:0x458da9 [ 969.580723][ T8321] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 969.600334][ T8321] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 969.600350][ T8321] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 969.600358][ T8321] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 969.600366][ T8321] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 969.600375][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 05:58:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 969.600382][ T8321] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:30 executing program 3 (fault-call:3 fault-nth:5): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:30 executing program 4: clock_adjtime(0x4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xff}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x2c040, 0x0) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000200)={0x2, "2ca58aff6d8ae4bd92b02e40ff71ec318af223b272bd23fdf5d5c63aa1ba0856", 0x1, 0x1}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x7) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000080)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000240)={0x3000, 0x9000}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000280)={0x7, 0x4, 0x1, 0x200, 0xffffffff, 0x10001}) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000009c0)=0x4080) bind$rds(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xbcf, 0x5, 0x80000000, 0xff, 0x2, 0x3e, 0x7, 0x2c5, 0x40, 0xac, 0x9, 0x2, 0x38, 0x2, 0x32788898, 0xd8a, 0x4}, [{0x1, 0x0, 0x9, 0x80000001, 0x3, 0x5bec, 0x54d0}], "1a96f7f395443e9a58cab9b8986a4c059894f539066d5abc7ee660d4db4e2bd5ee0bd7e7bef373754a777bfd799f56e1397981f4d992fd68487f5163e18fff8793fa3aff8ed035e6842f3c179e4ea84a73f9db5d", [[], [], [], [], [], []]}, 0x6cc) 05:58:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) open_by_handle_at(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x200) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x28000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) write$FUSE_STATFS(r1, &(0x7f0000000140)={0x60, 0x0, 0x5, {{0x40, 0xd7, 0x5, 0x46800000000000, 0x1, 0x1, 0xf1f, 0x1}}}, 0x60) bind$llc(r2, &(0x7f0000000000), 0x10) 05:58:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1054}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:30 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x680000, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 970.224469][ T26] audit: type=1326 audit(1556776710.428:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8655 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:30 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x1) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)=""/219, &(0x7f0000000180)=0xdb) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) creat(&(0x7f0000000080)='./file1\x00', 0x40) 05:58:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 970.271098][ T8740] FAULT_INJECTION: forcing a failure. [ 970.271098][ T8740] name failslab, interval 1, probability 0, space 0, times 0 05:58:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') bind$llc(r1, &(0x7f0000000000), 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x4000, 0x0) finit_module(r0, &(0x7f0000000100)='tunl0\x00', 0x2) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x4) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000180)={0xffffffffffffffff, 0x3, 0xffff, 0x3, 0xffff}) 05:58:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5410}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 970.395082][ T8740] CPU: 0 PID: 8740 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 970.403030][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.413090][ T8740] Call Trace: [ 970.416398][ T8740] dump_stack+0x172/0x1f0 [ 970.420747][ T8740] should_fail.cold+0xa/0x15 [ 970.425456][ T8740] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 970.431277][ T8740] ? ___might_sleep+0x163/0x280 [ 970.431297][ T8740] __should_failslab+0x121/0x190 [ 970.431316][ T8740] should_failslab+0x9/0x14 [ 970.441073][ T8740] kmem_cache_alloc_node_trace+0x270/0x720 [ 970.441089][ T8740] ? kasan_unpoison_shadow+0x35/0x50 [ 970.441105][ T8740] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 970.441124][ T8740] __kmalloc_node+0x3d/0x70 [ 970.466942][ T8740] kvmalloc_node+0x68/0x100 [ 970.471462][ T8740] alloc_fdtable+0x142/0x290 [ 970.476058][ T8740] dup_fd+0x743/0xb30 [ 970.480066][ T8740] unshare_fd+0x160/0x1d0 [ 970.484411][ T8740] ? set_max_threads+0xe0/0xe0 [ 970.489176][ T8740] ? find_held_lock+0x35/0x130 05:58:30 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) r1 = getpgrp(0xffffffffffffffff) ptrace$getsig(0x4202, r1, 0xffffffffffffffb5, &(0x7f0000000080)) [ 970.493943][ T8740] ? cache_grow_end+0xa4/0x190 [ 970.498723][ T8740] unshare_files+0x7f/0x1f0 [ 970.503235][ T8740] ? __ia32_sys_unshare+0x40/0x40 [ 970.508272][ T8740] __do_execve_file.isra.0+0x27e/0x23f0 [ 970.513918][ T8740] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 970.520164][ T8740] ? __phys_addr_symbol+0x30/0x70 [ 970.525188][ T8740] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 970.530920][ T8740] ? __check_object_size+0x3d/0x42f [ 970.536122][ T8740] ? copy_strings_kernel+0x110/0x110 [ 970.536138][ T8740] ? strncpy_from_user+0x2a8/0x380 [ 970.536158][ T8740] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 970.546518][ T8740] __x64_sys_execveat+0xed/0x130 [ 970.546540][ T8740] do_syscall_64+0x103/0x610 [ 970.546562][ T8740] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 970.546573][ T8740] RIP: 0033:0x458da9 [ 970.546590][ T8740] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 970.591658][ T8740] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 970.600083][ T8740] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 970.608067][ T8740] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 970.616134][ T8740] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 970.624126][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 970.632099][ T8740] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:31 executing program 3 (fault-call:3 fault-nth:6): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0acba605c12984dc000000") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) write$UHID_INPUT2(r2, &(0x7f00000000c0)={0xc, 0x70, "bf1f28123683dc930eea17ae9470443e2c82fcb3d603684c0909dfe8142d6f5349e7826244db281b300dc10c6cdd9e1de9c90a31719e4306f7948a319c4f531c2a3d35e56d0e1ae609342b8d46a32b6e2b33814fafc487022c302f3a8bed343b1d21914876b427a7439f08663f841361"}, 0x76) 05:58:31 executing program 4: sched_setattr(0x0, &(0x7f00000000c0)={0x30}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.s\x00\x00\x00\x80\x00\xb0\x00\x00ent\x00M\xe1\xd6\xc3@\t\xd4\x92\xba]\xc8', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) fallocate(r1, 0xfffffffffffffffc, 0x0, 0x2000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0xfffffffffffffffe, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) 05:58:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:31 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) fremovexattr(r0, &(0x7f0000000080)=@random={'system.', ':\x00'}) 05:58:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 971.099346][ T26] audit: type=1326 audit(1556776711.301:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9197 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 971.150392][ T9285] FAULT_INJECTION: forcing a failure. [ 971.150392][ T9285] name failslab, interval 1, probability 0, space 0, times 0 [ 971.188513][ T9285] CPU: 0 PID: 9285 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 05:58:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 971.196471][ T9285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.206542][ T9285] Call Trace: [ 971.209866][ T9285] dump_stack+0x172/0x1f0 [ 971.214214][ T9285] should_fail.cold+0xa/0x15 [ 971.218828][ T9285] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 971.224665][ T9285] ? ___might_sleep+0x163/0x280 [ 971.229534][ T9285] __should_failslab+0x121/0x190 [ 971.234485][ T9285] should_failslab+0x9/0x14 [ 971.239004][ T9285] kmem_cache_alloc_trace+0x2d1/0x760 [ 971.244398][ T9285] __do_execve_file.isra.0+0x325/0x23f0 05:58:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 971.249953][ T9285] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 971.256203][ T9285] ? __phys_addr_symbol+0x30/0x70 [ 971.261232][ T9285] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 971.266958][ T9285] ? __check_object_size+0x3d/0x42f [ 971.272171][ T9285] ? copy_strings_kernel+0x110/0x110 [ 971.277465][ T9285] ? strncpy_from_user+0x2a8/0x380 [ 971.282602][ T9285] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 971.288882][ T9285] __x64_sys_execveat+0xed/0x130 [ 971.293833][ T9285] do_syscall_64+0x103/0x610 05:58:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 971.298451][ T9285] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.304341][ T9285] RIP: 0033:0x458da9 [ 971.308233][ T9285] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 971.328018][ T9285] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 971.336440][ T9285] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 971.344421][ T9285] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 971.352398][ T9285] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 971.360387][ T9285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 971.370610][ T9285] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:32 executing program 3 (fault-call:3 fault-nth:7): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:32 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x976, 0x5, 0x8, 0xfffffffffffffffc, @time={0x0, 0x1c9c380}, {0x5, 0x400c2fffff2}, {0xfffffffffffffffc, 0xfffffffffffffceb}, @quote}], 0x30) 05:58:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:32 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000900}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb851}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5000000000000000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x101}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r3, &(0x7f0000000000), 0x10) 05:58:32 executing program 4: openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f00000003c0)={0x79, 0x0, [0x8, 0xfffffffffffff67f, 0x2, 0x7fff]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x3, 0x5, 0x3f) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in=@dev, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) prctl$PR_SET_FP_MODE(0x2d, 0x2) clock_getres(0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video36\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000440)={0x2, 0x0, {0x1, 0x3, 0x1000, 0x3, 0x98e}}) write$rfkill(r1, &(0x7f00000004c0)={0x200, 0x9, 0x3}, 0xffffffffffffff84) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000040)={0x0, 0xe7ffffffffffffff, 0x4, {0x1, @raw_data="91c317e532ed8aae710af5141194a4f3c1c9dd7320301f4bbb68bb38cf4c0f7aabf90ec73338c4fbb209f2ada49252832a0f9f18764d92557b9ed6f9fbb91062e34a85f56a3625e27986be7298c838d4a88f9a98579cd767708a0902e15f31084d3d871c65e6295fb09a06231b4115303464d474efe7851aef656513a79ead86615a5dd817f7ad7871ff492da2d1a7765a717bd6fb7b764a9c6dd057250afa21935ec894b1001f7525d97b962b4397ade47b8ea3ab470c2678f2c866e649585c7eb5de1b83fda8ab"}}) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) 05:58:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 971.978604][ T26] audit: type=1326 audit(1556776712.173:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9527 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 972.028490][ T9548] FAULT_INJECTION: forcing a failure. [ 972.028490][ T9548] name failslab, interval 1, probability 0, space 0, times 0 [ 972.081647][ T9548] CPU: 1 PID: 9548 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 972.089594][ T9548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.099655][ T9548] Call Trace: [ 972.102960][ T9548] dump_stack+0x172/0x1f0 [ 972.107307][ T9548] should_fail.cold+0xa/0x15 [ 972.111918][ T9548] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 972.117741][ T9548] ? ___might_sleep+0x163/0x280 [ 972.122602][ T9548] __should_failslab+0x121/0x190 [ 972.127571][ T9548] should_failslab+0x9/0x14 05:58:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f0000000080)="0adc1f123c120ac3935e78e8c64a8005fd6c3f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) 05:58:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 972.132081][ T9548] kmem_cache_alloc+0x2b2/0x6f0 [ 972.136950][ T9548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 972.143288][ T9548] ? __validate_process_creds+0x22d/0x380 [ 972.149021][ T9548] prepare_creds+0x3e/0x3f0 [ 972.153540][ T9548] prepare_exec_creds+0x12/0xf0 [ 972.158402][ T9548] __do_execve_file.isra.0+0x393/0x23f0 [ 972.163949][ T9548] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 972.170189][ T9548] ? __phys_addr_symbol+0x30/0x70 [ 972.175313][ T9548] ? __sanitizer_cov_trace_cmp8+0x18/0x20 05:58:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 972.181049][ T9548] ? __check_object_size+0x3d/0x42f [ 972.186255][ T9548] ? copy_strings_kernel+0x110/0x110 [ 972.192943][ T9548] ? strncpy_from_user+0x2a8/0x380 [ 972.198952][ T9548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 972.209302][ T9548] __x64_sys_execveat+0xed/0x130 [ 972.214244][ T9548] do_syscall_64+0x103/0x610 [ 972.218919][ T9548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.224817][ T9548] RIP: 0033:0x458da9 [ 972.228717][ T9548] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 972.248428][ T9548] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 972.256836][ T9548] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 972.264797][ T9548] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 972.272765][ T9548] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 05:58:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/protocols\x00') ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000700)={0x3, 0x1, [0x2, 0x10000, 0x5fc, 0x3, 0x22, 0x1, 0x6, 0xffffffffffffff00]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x400000000000, &(0x7f0000000740)={0x0, 0x0}) r6 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0xfffffffffffffffd) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='security.capability\x00', &(0x7f0000000680)=@v2={0x2000000, [{0x1fb, 0x10000}, {0x7}]}, 0x14, 0x1) ioctl$VIDIOC_ENCODER_CMD(r6, 0xc028564d, &(0x7f0000000540)={0x2, 0x1, [0x7, 0xfff, 0x6, 0x1, 0x0, 0x8001, 0x7, 0x7fffffff]}) write$sndseq(r1, &(0x7f0000000340)=[{0x0, 0x1, 0x80000001, 0x100, @tick=0x7ff, {0x6, 0x3}, {0x7, 0x1}, @connect={{0x8000000000, 0x6}, {0x100000000}}}, {0x1, 0x2, 0x8, 0x5, @tick, {0x15a, 0xfffffffffffffffe}, {0x100000000, 0x2}, @ext={0x0, &(0x7f0000000080)="d5012b1557899cfb4ca9d58dc4f3ad81100d9a22e74452c46fdf9dd1a1c4859ce4818b3bf5ffc36ebc126efb67793ac2f6475836c9f57858271179d42cd3e562672490ce1f24f80e46c9947872473a06ae85d66f432442405da530f47a067e2b80b8e8b125d79f524dd3b056ab6848cf0ec888ccba29c890a58732755cf4fce79b65587b5f3f3253b0ca073a8600477148b9b9e918137a97b8bf883b8ffbfa52876555ec1398fb878b54cb39369f96d510909558ef5992eb33cdd025fceb64bb8297aae897643f81a2f103380c49544c7d849534f9b773f41432f3bdab15a76d2f2908cbdfc2f4c5a0e489e2a4"}}, {0x8, 0x1, 0x80000000, 0xd2, @time={r2, r3+10000000}, {0x20}, {0x80000001, 0x4}, @quote={{0x8, 0x100000001}, 0x7fff, &(0x7f0000000200)={0x0, 0x4, 0x3ff, 0x0, @time={r4, r5+10000000}, {0x51aa, 0x2}, {0x1f, 0x8000}, @queue={0x2, {0xfffffffffffffffc, 0x4}}}}}, {0x1328, 0x100000000, 0x6, 0x5, @time={0x0, 0x1c9c380}, {0x3ff, 0x7fffffff}, {0x8, 0x5}, @result={0x285, 0x1}}, {0x0, 0x1, 0x9, 0x9898, @time, {0x400}, {0x1c4, 0x6}, @connect={{0x5, 0x8000}, {0xfff, 0x9}}}, {0x40, 0x7ff, 0x9, 0x3, @time={0x0, 0x1c9c380}, {0x9, 0x6}, {0x7}, @addr={0x3, 0x82}}, {0x4, 0x9, 0x6, 0xffffffff, @tick=0x9ded, {0xfffffffffffffffc, 0x7fff}, {0x5, 0xfb}, @ext={0x0, &(0x7f0000000240)="851be59bce3e0e2a7fad0c037125c20bf495307bf3f113e8fb64cd37c947a4e60234b8119fa8914ec20a461315c9024d82e9b5edc189da50ed96297bee0736c35e1c78645f1c8ea6365f4d0237646dda168add4f66a7a2bd54c83650e71b87abcb52b09abd513d485db0d1e955e7453c65d458927ca6e1713759cf8a945351a77eaffc50f8ab65fdd68f76b3c9bbae1a6fd07321ddcb9540b67555fc365dabacbab203940d77a33b046ade6d7a0c549663709bee2bdcd6343de9bd5e9e7d"}}, {0x1, 0x6, 0x3ff, 0x6, @tick=0x71c0, {0xffffffffffff7fff, 0x9}, {0x91, 0x5}, @ext={0x0, &(0x7f0000000300)="f94034b362cdce29402bd9dd2eff3fd764774cb36f012e0d5122f57d1a4552e943c0eeeb7a0756ca9d34232ba7b34433c292f2"}}, {0x0, 0x1f, 0x4, 0x5, @time, {0x7fffffff, 0xffff}, {0x63f0, 0x1000}, @queue={0x5, {0x100000000, 0x9}}}, {0x7, 0x576, 0xaa, 0x2f6, @tick=0x7, {0x74aa, 0x400}, {0x7, 0x6}, @time=@tick=0xffff}], 0xfffffffffffffdf0) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000580), &(0x7f00000005c0)=0x4) sendmsg$nl_generic(r1, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x32}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x134, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfb, {0x1b}, [@generic="688faf149744ba4a5f695736cc7aefc58131e5b87fed57d2", @generic="378b36ab36867f610e548530bbbce36e400f21e68a892b7b42331fa91cc099593348e30ca9ecffa55c2ac091a8539b617288b44b6ebf9d8cdccabb6f2dd75534c4d90332adbc369c004bdf5c6559abe60f7d78bab84ec5fcbcecf4904cf4b380fc4d6f4f791b19982f91042d5810724008f9afd89ea7358e32ab0d1783d90d1e", @nested={0x3c, 0x85, [@typed={0x38, 0x6f, @binary="e86c715911cdcd2104ca099d6a30f31eef3329dd9e349a6df8fd8fffddb2701823eb88c3eb7631bed33a8869d8d58968768e97"}]}, @typed={0x8, 0x8e, @u32=0x20}, @generic="530017188654c6a775fdab5981f269dd76e094b226f6d2f853715cd559bf8984d19789a396ae1df8509a82ee4b7bc49c12fa28dc6c454d0895144c0f62d9408600ae"]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) [ 972.280725][ T9548] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 972.288690][ T9548] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:32 executing program 3 (fault-call:3 fault-nth:8): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:32 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {0x0, 0x1}, @quote}], 0x30) 05:58:32 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = dup3(r1, r2, 0x80000) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x1, 0x31, 0x16, 0x10, 0x4, 0x0, 0x4, 0xe2}}) listen(r0, 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback}, 0x3a) close(r0) accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80800) sendto$packet(r3, &(0x7f0000000080)="69f9b4d9260ca302a8cca4a958596f4173b2362025c44adecf7ca2994e5e17846e74847272abd8fa6b40231a6096d12fd83b7bc369084d468f618aa0df166b00bf6b01fb51bdfb9709031c7dec7c2ae5540c7e8c1592638143ba4c48987ef60cfa9059f9de9d8cc9e2405e96992334f077a93e6cf24db3ce55f782b6d4bfc4deb5219db9e76c81b366680cd3bb6dbd38eb1a27938da11d3b3f6f96b5e625fb95dbe3b6e357791a367c68cb3012e3b53e59ceaebb87d5165e278929080ca64563eba7a7a8efdfd4810a88f50200d6e3e8d5d1dea2", 0xd4, 0x4000000, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0x7ff, 0x6, @broadcast}, 0x14) 05:58:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x1e, @empty, 0x4e23, 0x3, 'nq\x00', 0xc, 0x3, 0x25}, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) [ 972.838064][ T26] audit: type=1326 audit(1556776713.016:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9969 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 972.889489][T10026] FAULT_INJECTION: forcing a failure. [ 972.889489][T10026] name failslab, interval 1, probability 0, space 0, times 0 05:58:33 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = dup3(r1, r2, 0x80000) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x1, 0x31, 0x16, 0x10, 0x4, 0x0, 0x4, 0xe2}}) listen(r0, 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback}, 0x3a) close(r0) accept4$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x80800) sendto$packet(r3, &(0x7f0000000080)="69f9b4d9260ca302a8cca4a958596f4173b2362025c44adecf7ca2994e5e17846e74847272abd8fa6b40231a6096d12fd83b7bc369084d468f618aa0df166b00bf6b01fb51bdfb9709031c7dec7c2ae5540c7e8c1592638143ba4c48987ef60cfa9059f9de9d8cc9e2405e96992334f077a93e6cf24db3ce55f782b6d4bfc4deb5219db9e76c81b366680cd3bb6dbd38eb1a27938da11d3b3f6f96b5e625fb95dbe3b6e357791a367c68cb3012e3b53e59ceaebb87d5165e278929080ca64563eba7a7a8efdfd4810a88f50200d6e3e8d5d1dea2", 0xd4, 0x4000000, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0x7ff, 0x6, @broadcast}, 0x14) 05:58:33 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x2, 0x80fffff0}, {0x1}, @quote}], 0x30) 05:58:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 972.998948][T10026] CPU: 1 PID: 10026 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 973.006984][T10026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.017048][T10026] Call Trace: [ 973.020360][T10026] dump_stack+0x172/0x1f0 [ 973.024707][T10026] should_fail.cold+0xa/0x15 [ 973.029324][T10026] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 973.035148][T10026] ? ___might_sleep+0x163/0x280 [ 973.040018][T10026] __should_failslab+0x121/0x190 05:58:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xde03000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 973.044974][T10026] should_failslab+0x9/0x14 [ 973.049474][T10026] __kmalloc+0x2dc/0x740 [ 973.053720][T10026] ? refcount_inc_not_zero_checked+0x144/0x200 [ 973.059880][T10026] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 973.065690][T10026] ? security_prepare_creds+0x123/0x190 [ 973.071244][T10026] security_prepare_creds+0x123/0x190 [ 973.076623][T10026] prepare_creds+0x2f5/0x3f0 [ 973.081224][T10026] prepare_exec_creds+0x12/0xf0 [ 973.086070][T10026] __do_execve_file.isra.0+0x393/0x23f0 [ 973.091609][T10026] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 973.097835][T10026] ? __phys_addr_symbol+0x30/0x70 [ 973.102846][T10026] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 973.108559][T10026] ? __check_object_size+0x3d/0x42f [ 973.114017][T10026] ? copy_strings_kernel+0x110/0x110 [ 973.119283][T10026] ? strncpy_from_user+0x2a8/0x380 [ 973.124380][T10026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 973.130626][T10026] __x64_sys_execveat+0xed/0x130 [ 973.135843][T10026] do_syscall_64+0x103/0x610 [ 973.148679][T10026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 973.154560][T10026] RIP: 0033:0x458da9 [ 973.158450][T10026] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 973.178037][T10026] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 973.186516][T10026] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 973.194487][T10026] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 973.202460][T10026] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 973.210446][T10026] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 973.218399][T10026] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:33 executing program 3 (fault-call:3 fault-nth:9): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:33 executing program 4: r0 = socket(0x1000000000002, 0x7, 0x13) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'caif0\x00', &(0x7f0000000000)=@ethtool_test={0x7}}) 05:58:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) accept4$llc(r1, &(0x7f0000000100), &(0x7f0000000140)=0x3d4, 0xfffffffffffffffc) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000080)={0x1a, 0x320, 0x9, 0x3ff, 0x9, 0x1, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x3}, 0x10) 05:58:33 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) getsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 05:58:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:33 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 973.722842][ T26] audit: type=1326 audit(1556776713.899:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10213 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 973.772877][T10371] FAULT_INJECTION: forcing a failure. [ 973.772877][T10371] name failslab, interval 1, probability 0, space 0, times 0 [ 973.787182][T10371] CPU: 1 PID: 10371 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 973.795186][T10371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.805247][T10371] Call Trace: [ 973.808564][T10371] dump_stack+0x172/0x1f0 [ 973.812937][T10371] should_fail.cold+0xa/0x15 [ 973.817545][T10371] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 973.823371][T10371] ? ___might_sleep+0x163/0x280 [ 973.828233][T10371] __should_failslab+0x121/0x190 [ 973.833181][T10371] should_failslab+0x9/0x14 [ 973.837687][T10371] kmem_cache_alloc+0x2b2/0x6f0 [ 973.842543][T10371] ? kasan_check_read+0x11/0x20 [ 973.847403][T10371] __alloc_file+0x27/0x300 [ 973.851825][T10371] alloc_empty_file+0x72/0x170 [ 973.856599][T10371] path_openat+0xef/0x46e0 [ 973.861035][T10371] ? save_stack+0xa9/0xd0 [ 973.865370][T10371] ? path_lookupat.isra.0+0x8d0/0x8d0 05:58:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x1) accept4$llc(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80800) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @rand_addr=0xffff}, {0x2, 0x4e21, @empty}, 0x81, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='syzkaller1\x00', 0xfffffffffffffc01, 0xa1, 0x400}) r3 = semget(0x3, 0x7, 0x54) semctl$IPC_RMID(r3, 0x0, 0x0) 05:58:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ptrace$setregset(0x4205, r1, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)="69bf4f28d150ad5efa0322d58066daed674b5112bc3b72d6c7b51f623bec9f1f", 0x20}) ioctl$TCXONC(r0, 0x540a, 0x2) [ 973.870749][T10371] ? __kmalloc+0x15c/0x740 [ 973.875165][T10371] ? security_prepare_creds+0x123/0x190 [ 973.880712][T10371] ? prepare_creds+0x2f5/0x3f0 [ 973.885490][T10371] ? prepare_exec_creds+0x12/0xf0 [ 973.890521][T10371] ? __do_execve_file.isra.0+0x393/0x23f0 [ 973.896238][T10371] ? __x64_sys_execveat+0xed/0x130 [ 973.901361][T10371] ? do_syscall_64+0x103/0x610 [ 973.906126][T10371] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 973.912323][T10371] ? __lock_acquire+0x548/0x3fb0 [ 973.917243][T10371] ? prepare_exec_creds+0x12/0xf0 [ 973.922252][T10371] do_filp_open+0x1a1/0x280 [ 973.926757][T10371] ? may_open_dev+0x100/0x100 [ 973.931421][T10371] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 973.937029][T10371] ? find_held_lock+0x35/0x130 [ 973.941784][T10371] ? __lock_acquire+0x548/0x3fb0 [ 973.946710][T10371] do_open_execat+0x137/0x690 [ 973.951387][T10371] ? unregister_binfmt+0x170/0x170 [ 973.956485][T10371] ? lock_downgrade+0x880/0x880 [ 973.961316][T10371] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 973.967532][T10371] ? kasan_check_read+0x11/0x20 [ 973.972374][T10371] ? do_raw_spin_unlock+0x57/0x270 [ 973.977464][T10371] __do_execve_file.isra.0+0x178d/0x23f0 [ 973.983082][T10371] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 973.989306][T10371] ? copy_strings_kernel+0x110/0x110 [ 973.994569][T10371] ? strncpy_from_user+0x2a8/0x380 [ 973.999658][T10371] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 974.005878][T10371] __x64_sys_execveat+0xed/0x130 [ 974.010797][T10371] do_syscall_64+0x103/0x610 [ 974.015367][T10371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 974.021233][T10371] RIP: 0033:0x458da9 [ 974.025114][T10371] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 974.044707][T10371] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 974.053132][T10371] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 974.061090][T10371] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 05:58:34 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x200000, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) [ 974.069037][T10371] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 974.076983][T10371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 974.084929][T10371] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:34 executing program 3 (fault-call:3 fault-nth:10): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:34 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:34 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x14000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000010c0)={0x80000001, &(0x7f00000000c0)="ed05ac4d404787d6aaf023e8cca22b36424d89b8c1f2e77f853675a72fd0c113cc431bf61f9ff2577bddde3e1044c7641d9f3d75b6d338fe73ff28c360dbfe263044f236a9b7a0cff6b8ba58b7de584421479ff8d01580f9c47c765b92954af740a26a9a7583337cde01272edfc9f0038fbce7a89c976ac6361c68d6466ae25dc850cc899c9c664947b5785dfa82f633691d2ecefe8503d5b07dd921f9a783056cceca996ff70ef462e5c4e449562a269af07ab29e8a2fe4ed41a7dd858ffee3125bd2492e632c0601155ee5187d20a05402a22190ae065d2af3518d76c26c972fa8cf0d7edf6e9a6b4ea53b52756faf9520d5c086ebf21321ed48b0679f1a618cb3c88f294d6ca1a37b6d0de35edfd6fbe2b92d498db6d650c509bb175ea6588f53bfcac0bba2c01d2c6b03dadaddd896a5513ae2ced12a6f5e100ef1d8fa377929edfbef03f14ef2a6e89434b9edccf45249bd404721d0c314a7ee82947d8cdf8e3f9d87d0f2336adca061e45581c129ff76a522de5c09064677b6c5073eb9ce3f959efab429a378053d785a88bde275e0d7214f441264f4a1376bc6d8f9d6c71c4424a1f7d8743185d699ab7e791a8f106478b76747a87651313fa8e568244f775dbfffa7204330fca3811d0b90adaf84f9cb60d8df71b5d9a67f314786d0e5160ee1f1ea461ba89cd861ccc1e4dbf871e1faa0827cd22d6adf7c78213e995bc788d4b9bfa1ac3b9c64822a1af6b95167a11c9a49c5f7d40e50b70eda9621dfc33f1f509b0fbd2938dfa1671ee5fb8c3c5f168410b932c8cda317b61942265722676228c241023b83c5634af60053532343bdefd6ee1df604cd597f7b68dbd1a19f8904c71eccc1e6fc7490adcabfda6946018f6e4f776adf84d031a5684d0544f596441436d7e6e58488fb8d6b5b590cb54c7133b29ca2a1c89d5458afee27681781d9ef14081caff9ee491f1c1a1d6714153921f19df1a8e1692ff576babcfaaadafceae426a99d7f110899e9f8e03620fa57696e565f99d2e9ebff6959fe7c0d9667c72127272d36a002277bf0ee14e50d66f4bff79881bdd1094fc751a9c20a51f1ae77dfb7f14e28d2a348d88ad579275fe9a48fede279e91229fd091423b1cf80c750c70d33f369352f7beb2482e5cfcd56f93ab07ac65563d3b514a45c49ddf6f2aa25806d08f58c26c8d8462de3ed4d1ad662f083342c0264588c061bb26d0b5c7892996412b1b85f5164bd8acee917bb9e6e92caa214d237065a129a3307bd322e6da3d5e25eaa0e7efff2567ed864163fa536f7f37661f5c4e5844608a4506381a5438a36fc564224a340712557c8fac0d71cc39d7c82c6acfca95d049be52c555b7a9209c6beb0b79fb9339fcdb858f3ea6c215445184753b83776d41aae810ce65b9d122c72a8e2de3ad59e5dda792b16c85e98fd79fbfe420d323887043f69f17d6f1b684f826956610e3bc1b83957ed30e931f70e3ac79750e89579ce7f2dd48b916496f5a2d6ad8d0eee12a8603905a0b3b224b1bcff61023263d6b91471a1d688db921748afae868656ea6072c4d78f60e98117cabf249fce019dadefc611fe55065f47f91eaaf4a7384db7d1544ca0ea1b208c4e813127fca91f842678c7a7726c0932b733939671b0b7177664f63a46ec9977ed34d62259b8a69aa6187b28fb5b3d6d61491808c804f77a3e8078a911e4b678bf1df645dffb2a1ee7c781be19372d294d858665f05f940a35a3bf3bfe623a6b26febce3afc9e4e2ee30dacff1aa4fd383a2acc4ecc3464d601daf88233a6685219609465156774cef8148c5c24ce21c96161ca9214772a8f6dc5b995ed84a5ec53c26510ce837ac9c5f018bb0fa3990f732a8ce70e2ede23cd68d6d5d7b4f955efbd4299ba456daca886032d754b44c2cacee75e73fcaca790b0923935ae5e1de99597090d74898d7527cc9de88bb2460a34afa18f56186517eb4f4773e1888440233cea677b9140798617f94535150073aa5b40ccb77757e6029416ec7d0dde8ccd8f0df4fa7aac29be564433c79bf40c57b03054706c1710909fe5d285ea2c6ee4f34bb360f53f2d11adcbbc29c15c923da8014c812e5bd55594c602e096530a7972199f71cc639a347951d5c0d49e925f01362872efa219367d2c3670c44976927f2cc9013a9cf05603abe2091a9aac5d77b6ca81f710dc69e0c623ecea9c892bf7aaebd2d9efe5156eda22596fb1564f659f0d9a190a087cb22dff61281e3af6a1fa38b906eef23312a7f8aedf8783d35aac7f87fcf05e051bfcbd5cdaf4a6fba21ad6e440a336a88793ffcaa674b35fa67ac529081f0c58366fad596f6ecf8f4328f92c4e1b3260946580e34bb5ff19041bcb8201a4d0c391532b9040d4f683cd818e2858ce71f37b21d00df188c96525e46caaf1a6f9a2a454dc454447f65644a05a3f4f58782075e05bc6f57c170e3f76c08ede1a73f7204f8dc4eeb97fb4bd62a334d395e84fdcbb96a61c198c43d09d2510f922a2fde8d82b7d4fa7ebf484acc0922d4139cbc632d00d46e8db072eff6c40b522a47af711f749851c6a00ab67696c706398f85b74390681b2e4ff8afd942c76342bd8c5550dd90bdf9d248a522d5bb90c17b56bdcd2ec99623907457e3e9d8f18b9fab5564e60f0f8f828387003e456e514ea5130baef163c66718db6920173ae78e03e751895a6fa471860650e4ff2ce0f151336034658e2995c665157c7400b7409367c2a8a493b7341b2be61392eaa2ae3f1069e60531ba3ede2417e2adfe97f143ca0c02e2beb2e607e3358f63876cec6308ce09e9b4e8ca5f7d40662946743c777f9d1d44b45af43e896f261df57909bf0657492c56253caf58a2a2a9cb9a87c56b938948498d71b41d5879fbd22d109421cafb7615bff9c34d92d2ca93dd1c9b198b8ca39a5cdde42d260618fe2444246a34bc8a6274a0201e7f887b845c93dbe6e64df699c3c67091a7f60800068953aab25d277ae3eae5ab2c50cfdd23294d1a25d97360ff4a8241e7f792a8f6ecda6975f68fb9d466fdef2f20b05235ef5a0852da57baf685e1c69896bf168c3e7ca60ce78470d49bcb77e0f1759fb3ac14302972b5493e93b569f0a6ea6423e96b13f1b0a11cd0eddee22466e298caf36d0be5379650a0745f8b925bede168206a82c7b76a2df3ac4db435c510534def525ddd65ffd6acddfdef0f0447dd6c7d83cf8ed1d9a4a6ea36fb4190406a02b31ef2bf5b577cbf6215c73b272e90ebd13ae36c72a2d5e0dfcffae708936b6c5855e2e61f40f67a2443c8f087c85215e57aa0d6fbe3640b3fd5503614e7c03e96481d4783a7225dc0774b52cdc2d9085a5e9451470f8f5d01d042e2b7883330e417d5618657a53a2b34b1b44e25e27ae08c7b1af9470110723a7906f349bdf0a55ef9de0e475659de1d7386f726e9e1baa79e98baf68609ee35bb095ffa01d31994cc849da57d431d40ed4c9b81361a0a6ae25ff209d8dab2ea9852c9977604cf3ed0fa00bf319e5474df2169d433e6700679b9d79b5db8b94fc8acaa96d56f6c08bb0c21270f9f7ab39e9835f2f1459e22b29243f3286b7342126c8405ff1effe54578326490d8c1161d0ed47ae21842c388d8c58d11ba9d862caae825c6822f9c47e64f3054bbe7c2058a4b8fff57cf6023ebd0d329c0daa2832e1acd3c8e8c6517be1baf3e5949c84477530961cafd9d9f6674dacd5e0d181aeefb995c61cec5f21e99919c00111e28bbde89b643c406e1d1d89c179efd79c7847ee203fe15fa1707be94a4def59f617f1ef16e02151093b56970bcf67afd9dfb017b837dbda08eec8f54ba4d797fdcb11160008b27c34629ab18886828c96d3e1c79a55f67248fbbd25309235cf4d28fe5718e63de39b3c68aba93989c44a4ffd2bb092341785953119192e29980e85f6cc02214ec1215a39091fbaa6af294900dd4a69e59cf4c25478d32bc20dc32b856e928e88913d6f5194f347eb7a43a83f06c45d5864da9c06f162d851a29198898c98ee6edb263fe517c2401099bf8cb9a9eddeea92d3e89eba68006bdc9b28876f839ba125cf3e898bf552890450ad4b7be0b14e9ef5dfbbef09a2f74d553411c8c842d9bb23265c06e717ccf0c06304e49f50e99a6ec0011cf173ce2c5694e4cd1f8e878b6d012eb23a0e4b346d67567df30044a3258165d8bce7c6ec6506bbddb84dddb51f2d5fb1eb1bb1dbc62943a4590e5a2fc25cd815052b39cda7dbc64fef386ece23f8903d3647b5ed6fac5d9a36134c2d717c20de01372b50fca9b25bc9dc4cbdf11144a979b8018558948596d943ba8b997b2480ed419eb583f2f1244eeb1083b2e3f2e2067e4a7b82ffb50cdedf826590ed7b44aee89f296c5a3582453b5dcff07815ccccee6d5e2d6c41e6d39faefa8be8425601c9fb5a7342dbd8ce47b115bbf827c1411f448d035368d7616399f57d4254d2998163fad53de4f9ad74dd872c82388cfab38b6a07f3b67e20fb4cae2988195142a593ed49651c04da0c56fbd92bcd43a8ff1de66f4841b895f844d9075ebc1297ce9adf8bd297ec9a92ea2ea99ccf12aeadc9488b44b041a3c53a2ce708b66971ec3da4577401df08955eb84cdfe6999ef502c645ffc9e67fd098003eafe1ea8b2591bbf5618b747a57644558c8033c9d78e70530bcb17a9395a6559cba06804e41400f5069ba85af9bbffeee343cad076fde258975ba9b8a456d698f701923843c4d97948156cde31cb31da20989148e28acd9695975f6248942d36531812eeaf6866bd4242844182250d044c4f16210b879249374102642a3d4a5d810610aed032d07a888c1fb65ea04d764dee7482a74fba7931444b94705d9b82323839b655c561cf291805f6c9fc662ee0e9feba1633f5379f31f09d3c49f2ae467d6255414dbb91ee6b7c544472e141790dab17510d2eb7cd75e78ade921effe657bc8b5a5eb1e7cad0d88948d805d53331fad814eed0e076c68912ff22fbd785dfcd81d6d21596b2accd965076c05116d521be8c669ff134bef8e84cf0a99c6cea0c01454554c0bec9a79c8615ac572ec7be1abf01d0628940e0393f9bb825bb64931d8413d86014fb5a9c3e90391621fbd5f7b3a29bd33f21b8ce12f3a2489c2d78a5bb98999732bb53fc2614733f4a9db0ad6ec8bef0059bb0197d2adea5b7945eeb3af6dfd1794986f1153379799cb026789377eb0075d95a0dae85fa5b4d0239630b9ae5801d89699f4a4c5ca2038f05089c2ba8389348863ef1b8a524b3054a1a5acbdb29655dbdd4194da5b231c2917449891df1c77be1938ee3cab666c637442d91ba82961d0fbfd7b604e6226f2668c311ff312331b3e73d12bb9e56c945253152c2673236142ad86edf8e945a1a5d72b5380a1acd352d1b9e06353dd8fe9da8395e5d1bb287a116eeda42695e14f6dedace080cc2e3e4ef28e31ce3955fddde9a4748a2a631698e2a1f852325fe836db177375cb26358a5bf9423143fa38850cf61f1ecf7695d4557492fc9d0f74f342beca56349648c578c6d3fdfb3a294c26fbdc48baef6a9d57d19c1e88265d5e81d4f772d22012b47eccc717a2fe86a3d6cf13315e2b78bd8df5f1af3de4b1cedd8317b177debb1337882b0bb167db47103e8ea7b18890864febdf174c92756a2ec14136b67c2e81263ab27b9417162a61a03a67de7323f34db5a17a4db48de93e80aecc6e2b17f1c7239371f5c257c2d25e0284928287de4a3409b8854835c58278a629823d45073cb1d250bf7af5baa2e4627"}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) write$FUSE_IOCTL(r1, &(0x7f0000001100)={0x20, 0x0, 0x4, {0xf43f, 0x0, 0x5, 0x7f}}, 0x20) 05:58:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x6, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x1fffc, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1ff, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0xff, 0x400, 0xfd, &(0x7f0000000100)="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"}) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x8, 0x1c1760000}, 0xc) 05:58:34 executing program 4: socket$inet6(0xa, 0x80008, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_execute_func(&(0x7f00000012c0)="98a84a2ae92c211c420f05bf03000000c4a37bf0c55c41e2e92e363e460f1a7000660fde978fe97c80d1e3e30b110fb8c4014e4e0b5b5b016d7d14dee509c421045f4607c422adaf50e3c4e10bf8c45b70c4c4c4a3bd4877f88ac483397fd300f7dcdc0fbcaf4c10f138f653afaf6766f2ab440fec3facacc4c3214cb9a5604b19c201b00b000000f08171a30b8a826e670f542c3d271c0000a80dd4d48f6978d25debe8628f680864360fe25800218de3c0f52641802d08000000fa49c4f6a1dd7dbbbfdd5c450f918fffefffffbedcdca1c9fb110f66474f383ae34ba29fb7e2") 05:58:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 974.604545][ T26] audit: type=1326 audit(1556776714.782:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10669 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 974.652577][T10839] FAULT_INJECTION: forcing a failure. [ 974.652577][T10839] name failslab, interval 1, probability 0, space 0, times 0 [ 974.670084][T10839] CPU: 0 PID: 10839 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 974.678110][T10839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 974.688172][T10839] Call Trace: [ 974.691481][T10839] dump_stack+0x172/0x1f0 [ 974.695824][T10839] should_fail.cold+0xa/0x15 [ 974.700416][T10839] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 974.706240][T10839] ? ___might_sleep+0x163/0x280 [ 974.711364][T10839] __should_failslab+0x121/0x190 [ 974.716309][T10839] should_failslab+0x9/0x14 [ 974.720807][T10839] __kmalloc_track_caller+0x2d8/0x740 [ 974.726172][T10839] ? pointer+0xa30/0xa30 [ 974.730417][T10839] ? kasan_check_read+0x11/0x20 [ 974.735274][T10839] ? sched_exec+0x1cc/0x260 [ 974.739780][T10839] ? kasprintf+0xbb/0xf0 [ 974.744025][T10839] kvasprintf+0xc8/0x170 [ 974.744053][T10839] ? bust_spinlocks+0xe0/0xe0 [ 974.744074][T10839] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 974.758757][T10839] ? sched_exec+0x1cc/0x260 [ 974.763263][T10839] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 974.763281][T10839] ? lockdep_hardirqs_on+0x418/0x5d0 [ 974.763302][T10839] kasprintf+0xbb/0xf0 [ 974.763319][T10839] ? kvasprintf_const+0x190/0x190 [ 974.783451][T10839] ? nr_iowait+0x130/0x130 [ 974.787882][T10839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 974.794135][T10839] ? kasan_check_read+0x11/0x20 05:58:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r1, &(0x7f0000000000), 0x10) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) [ 974.799007][T10839] __do_execve_file.isra.0+0x94b/0x23f0 [ 974.804563][T10839] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 974.810820][T10839] ? copy_strings_kernel+0x110/0x110 [ 974.816124][T10839] ? strncpy_from_user+0x2a8/0x380 [ 974.821249][T10839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 974.827501][T10839] __x64_sys_execveat+0xed/0x130 [ 974.832449][T10839] do_syscall_64+0x103/0x610 [ 974.837048][T10839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 974.842938][T10839] RIP: 0033:0x458da9 05:58:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200)=0x5, 0x4) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000000000500000000000000000000000000ffee00000004"], 0xffbc) [ 974.846834][T10839] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 974.866445][T10839] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 974.874863][T10839] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 974.882833][T10839] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 974.882841][T10839] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 05:58:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54100000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:35 executing program 2: keyctl$session_to_parent(0x12) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x1, 0x0) bind$x25(r0, &(0x7f00000002c0)={0x9, @null=' \x00'}, 0x12) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x1087d, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000140)="684c4ddc483786f5a428315d142eccb0176391f86e52eed5138520c732657babfcdddb74ed37d676606513c6fa25ff0d9b60f9da16d6e064ff50a4172d10d8776b6eca2c28bf2bf621c8abf2cd40bbb832a12cd2ad9cf8d19e33e79680f000865b3af47f9d7dd507844c058cf6eba79d7f9cf9ebaf5e1d9fc4e8fd5877c04af872cbc52f5c3663cdc02549298665fa2c2caaf580a561e1b5744f29d15344d9d6c690c1d98c", 0xa5, r0}, 0x68) modify_ldt$write2(0x11, &(0x7f0000000080)={0x2, 0x20000000, 0x4000, 0x4, 0x7, 0x0, 0x2091, 0x10001, 0x3, 0x1f}, 0x10) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000000c0)={0x7f, 0x0, 0x9}) write$sndseq(r1, &(0x7f0000000100)=[{0x6, 0x2, 0x72, 0x792, @time={0x0, 0x1c9c380}, {0x40, 0x5}, {0xc0000000000000, 0x6}, @control={0x1ff, 0x1ff, 0x4}}], 0x30) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) [ 974.882848][T10839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 974.882856][T10839] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:35 executing program 3 (fault-call:3 fault-nth:11): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:35 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)='selinux\x00', 0xffffffffffffffff}, 0x30) rt_sigqueueinfo(r0, 0x15, &(0x7f0000000100)={0x7, 0xd43, 0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r2, &(0x7f0000000000), 0x10) 05:58:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:35 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) write$sndseq(r0, &(0x7f00000001c0)=[{0x1, 0x7, 0x4, 0xfffffffffffffff9, @tick=0x3000000000000000, {0x2, 0x7}, {0x0, 0xac}, @quote={{0x1f, 0x86}, 0x7, &(0x7f0000000080)={0x3f, 0xce, 0x5, 0x4, @time, {0x9, 0xfffffffffffffffe}, {0xf0de, 0x3}, @note={0x0, 0x24652edd, 0xff, 0x5, 0x3ff}}}}, {0x1, 0x81, 0x1, 0x6, @tick=0x9, {0x5, 0x1}, {0x1, 0xfb1}, @raw8={"2ceb2073a85c2b1c773c1730"}}, {0x400, 0x401, 0xffffffff, 0x80000000, @tick=0x3, {}, {0x2, 0x9}, @control={0x200, 0x9, 0x5}}, {0x0, 0x6, 0x80, 0x1, @tick=0x100000000, {0x0, 0x8}, {0x69}, @addr={0x101, 0x800}}, {0xffffffffffff44e5, 0x5, 0x20, 0x8, @time={0x0, 0x989680}, {0xffffffffffffff03, 0x3}, {0x9, 0x400}, @connect={{0x8000, 0x8}, {0x7fffffff, 0xfffffffffffffffc}}}, {0x3702, 0x3, 0x1f, 0x5, @time={0x77359400}, {0xfffffffffffffffc, 0x3}, {0x7, 0xef}, @queue={0x0, {0x7ff, 0x10001}}}, {0xd08, 0x7fff, 0xab7, 0xfffffffffffff567, @tick=0x9, {0x0, 0x9}, {0x800, 0x2}, @queue={0x8000, {0x7, 0x10001}}}, {0x3, 0x9, 0x8, 0x1, @tick=0xfbf, {0x81, 0xc074}, {0x5, 0x3}, @ext={0xd3, &(0x7f00000000c0)="c00ebca63004d42eef8456a9e26c9a2cb324941536f54bbd61802110657f0f71c8cd7e80f30bceb9035c6f3b37790edef10306efc51ff6597fc095c35e3d8ab8d1ff02559a20409d8a53250ed94595f0dc9e4d028cd5e8d24f5326ac8ce2f79092b68f6fb13ef5746b7833acbb64eea22df654c610df41149923fd768921a5bd4b5e33547c35dc75cd039dae23622a2ebb477ef5c915f12b4fa3ea3828b8a28e51a204bd9c7a4c4e507ec794ab32f7ebbad4b8b811f524a177f55cad7a3f51f4c1476fa712f9e8e7a3a570e51b0030a835b913"}}, {0x92b, 0x1, 0x0, 0x7, @tick=0xa940, {0x3}, {0x1, 0x3}, @note={0x101, 0x2, 0x40, 0x3ff, 0x8}}], 0x1b0) 05:58:35 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x63) r1 = dup2(r0, r0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000240)={0x8, 0xffffffff, [{0xffffffffffffff80, 0x0, 0x1}, {0x1ff, 0x0, 0x8}, {0x3, 0x0, 0x4f1d}, {0x5, 0x0, 0xa44b}, {0x5, 0x0, 0x6}, {0xfff, 0x0, 0x101}, {0x8, 0x0, 0xfffffffeffffffff}, {0x1, 0x0, 0x100}]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x3e3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r0, 0x0, 0x0) mknodat(r1, &(0x7f0000000180)='./file0\x00', 0x900, 0x1) r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 05:58:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00 \x00', 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x80) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140)=0x1, 0x4) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)={0x0, 0x3, 0x0, &(0x7f00000000c0)=0x4c}) bind$llc(r1, &(0x7f0000000000), 0x10) ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000180)) 05:58:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 975.507146][ T26] audit: type=1326 audit(1556776715.664:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11307 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 975.562323][T11418] FAULT_INJECTION: forcing a failure. [ 975.562323][T11418] name failslab, interval 1, probability 0, space 0, times 0 05:58:35 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:35 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @ext={0x2a, &(0x7f0000000080)="fe4536b48ed8bea49ddee18aad5fb056e2e643c5449865afed67261f09931e2e7625c01191a46fced7ff"}}], 0x30) [ 975.620448][T11418] CPU: 1 PID: 11418 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 975.628482][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.638546][T11418] Call Trace: [ 975.641849][T11418] dump_stack+0x172/0x1f0 [ 975.646197][T11418] should_fail.cold+0xa/0x15 [ 975.650808][T11418] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 975.656637][T11418] ? ___might_sleep+0x163/0x280 [ 975.661513][T11418] __should_failslab+0x121/0x190 [ 975.666458][T11418] should_failslab+0x9/0x14 05:58:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, &(0x7f0000000100)=@ipx, &(0x7f0000000180)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x806, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x6}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x1}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x21, 0x20000) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f00000000c0), 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, @dev={[], 0x22}}, 0x10) [ 975.670968][T11418] kmem_cache_alloc+0x2b2/0x6f0 [ 975.675828][T11418] ? nr_iowait+0x130/0x130 [ 975.680252][T11418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 975.686508][T11418] mm_alloc+0x1d/0xd0 [ 975.690498][T11418] __do_execve_file.isra.0+0xaa3/0x23f0 [ 975.696050][T11418] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 975.702332][T11418] ? copy_strings_kernel+0x110/0x110 [ 975.707628][T11418] ? strncpy_from_user+0x2a8/0x380 [ 975.712740][T11418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 975.718964][T11418] __x64_sys_execveat+0xed/0x130 [ 975.724005][T11418] do_syscall_64+0x103/0x610 [ 975.728576][T11418] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 975.734496][T11418] RIP: 0033:0x458da9 [ 975.738382][T11418] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 975.758056][T11418] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 975.766445][T11418] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 975.774404][T11418] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 975.782359][T11418] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 975.790307][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 975.798254][T11418] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:36 executing program 3 (fault-call:3 fault-nth:12): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:36 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x7, 0x10000) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003243b54a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/116], 0x4}, 0x1, 0x0, 0x0, 0x2}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x32, &(0x7f0000000040)={@mcast2={0xff, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800}, 0x21) 05:58:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:36 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000080)={0x60002008}) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:36 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000002c0)={0x89, 0x16, 0xfffffffffffffff8, 0x1f, &(0x7f00000000c0)=""/31, 0xd3, &(0x7f0000000100)=""/211, 0x86, &(0x7f0000000200)=""/134}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) bind$llc(r0, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, @random="f15779dc11c6"}, 0xfffffffffffffdbc) 05:58:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 976.390742][ T26] audit: type=1326 audit(1556776716.547:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11752 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 976.450786][T11876] FAULT_INJECTION: forcing a failure. [ 976.450786][T11876] name failslab, interval 1, probability 0, space 0, times 0 [ 976.503949][T11876] CPU: 1 PID: 11876 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 976.511992][T11876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.522053][T11876] Call Trace: [ 976.525372][T11876] dump_stack+0x172/0x1f0 [ 976.529722][T11876] should_fail.cold+0xa/0x15 [ 976.534324][T11876] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 976.540146][T11876] ? ___might_sleep+0x163/0x280 [ 976.545013][T11876] __should_failslab+0x121/0x190 [ 976.549957][T11876] should_failslab+0x9/0x14 05:58:36 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:36 executing program 1: seccomp(0x0, 0x3ffffffffffd, &(0x7f0000000040)={0x0, 0x0}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in={{0x2, 0x4e22, @empty}}}, 0x84) [ 976.554470][T11876] kmem_cache_alloc+0x2b2/0x6f0 [ 976.559326][T11876] ? nr_iowait+0x130/0x130 [ 976.563750][T11876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 976.569994][T11876] mm_alloc+0x1d/0xd0 [ 976.573965][T11876] __do_execve_file.isra.0+0xaa3/0x23f0 [ 976.579495][T11876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 976.585785][T11876] ? copy_strings_kernel+0x110/0x110 [ 976.591072][T11876] ? strncpy_from_user+0x2a8/0x380 [ 976.596184][T11876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 976.602416][T11876] __x64_sys_execveat+0xed/0x130 [ 976.607339][T11876] do_syscall_64+0x103/0x610 [ 976.611928][T11876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 976.617807][T11876] RIP: 0033:0x458da9 [ 976.621693][T11876] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 976.641291][T11876] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 05:58:36 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) clock_nanosleep(0x6, 0x1, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000140)) 05:58:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 976.649700][T11876] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 976.657662][T11876] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 976.665611][T11876] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 976.673571][T11876] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 976.681542][T11876] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:37 executing program 3 (fault-call:3 fault-nth:13): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x80000000000000bd) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}}], 0x4000000000000c7, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101000, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) sendto$packet(r3, &(0x7f0000000000)='0', 0x1, 0x0, 0x0, 0x0) io_setup(0x8001, &(0x7f0000000080)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) io_getevents(r5, 0x80, 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000180)={r6, r7+30000000}) 05:58:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:37 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='sit0\x00', 0x10) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100, &(0x7f0000000240)) 05:58:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 977.288276][ T26] audit: type=1326 audit(1556776717.439:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12085 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:37 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f00000002c0)="994a2ae92c02964c0f05bf03000000c4a37bf0c5fe41e2e9c422e9aabb3c0000004a0fc7a4ea70db000000000f383a9e02000000110f4e5bc4a265aa104b26660f38091e2fa2631bc421045f4607c421dd589fc4e10bf8e426f2f045f619640f0f6f43a038fd52262e2e66450f7d64c60865f2ad0383397fd3ff3a0065f20f7cd8efa1a12ad764d38f53efaf6766f2ab440fec3f67ddea660f79cec462b1f72ec3c4899294d800000000000fc4634148f70000c2a0c10b00cca27a0e0fc442cd376d000f9f3c6436b2aa66450fc4650000c4e39978c104d9a1e8719e70ddcdcda2660f38346800c4e3295d4c3dc8a3c4c1045ccc7d75c4426507af0f0000005cf3460f2ad0f30f5ea5a9a50000ffff660f79ca553131b83a00a2f1fbfb766208cf") sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2000c000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x100000000000005, &(0x7f0000000080)=0x7, 0x3) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x44, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x400}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x39}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x101}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x400, 0x3, 0x7]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x1) [ 977.340062][T12254] FAULT_INJECTION: forcing a failure. [ 977.340062][T12254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 977.397081][T12254] CPU: 0 PID: 12254 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 977.405114][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.415282][T12254] Call Trace: [ 977.418589][T12254] dump_stack+0x172/0x1f0 [ 977.422945][T12254] should_fail.cold+0xa/0x15 [ 977.427548][T12254] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 977.433362][T12254] ? ___might_sleep+0x163/0x280 [ 977.438229][T12254] should_fail_alloc_page+0x50/0x60 [ 977.443443][T12254] __alloc_pages_nodemask+0x1a1/0x8d0 [ 977.448833][T12254] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 977.454564][T12254] ? find_held_lock+0x35/0x130 [ 977.459344][T12254] ? percpu_ref_put_many+0x94/0x190 [ 977.464547][T12254] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 977.470787][T12254] alloc_pages_current+0x107/0x210 [ 977.475899][T12254] __get_free_pages+0xc/0x40 [ 977.480496][T12254] pgd_alloc+0x8b/0x3f0 [ 977.484661][T12254] ? pgd_page_get_mm+0x40/0x40 [ 977.489426][T12254] ? lockdep_init_map+0x1be/0x6d0 [ 977.494457][T12254] ? lockdep_init_map+0x1be/0x6d0 [ 977.499493][T12254] mm_init+0x590/0x9b0 [ 977.503570][T12254] mm_alloc+0xa6/0xd0 [ 977.507570][T12254] __do_execve_file.isra.0+0xaa3/0x23f0 [ 977.513126][T12254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 977.519380][T12254] ? copy_strings_kernel+0x110/0x110 [ 977.524755][T12254] ? strncpy_from_user+0x2a8/0x380 [ 977.529878][T12254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 977.536131][T12254] __x64_sys_execveat+0xed/0x130 [ 977.541077][T12254] do_syscall_64+0x103/0x610 [ 977.545687][T12254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 977.551579][T12254] RIP: 0033:0x458da9 [ 977.555481][T12254] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 977.575164][T12254] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 977.583672][T12254] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 05:58:37 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x4}, 0x10) 05:58:37 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}], 0x3, 0x7, &(0x7f0000000080)={0xa114}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000200)={0x3, 0x3ff}) r2 = accept4$x25(r0, &(0x7f0000000240)={0x9, @remote}, &(0x7f0000000280)=0x12, 0x80800) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000002c0)=""/68) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000340)) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e21, 0x3ff, @empty, 0x8}}, 0xb22d, 0x3abf, 0x3, 0x7, 0x1}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0)={r3, 0x1000, "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"}, &(0x7f0000001500)=0x1008) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) sendmsg$kcm(r0, &(0x7f0000001680)={&(0x7f0000001540)=@sco={0x1f, {0x2, 0x6, 0x7f, 0x3, 0x101, 0xd43f}}, 0x80, &(0x7f0000001640)=[{&(0x7f00000015c0)="7902a48992678a9ee731ae91c406ade50178b1844edd027086392a1b0b46f12cfc1fd768df425810ca5885931e2f40561afa7c74bbc904dac7a75ca6aa197d8c3292042e3bd5316b6f13d91c316ce242", 0x50}], 0x1}, 0x4000040) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001880)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001840)={&(0x7f0000001740)={0xfc, r4, 0x304, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xd4, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x74}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcb}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdbf3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008014}, 0x10) timerfd_create(0x7, 0x80800) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f00000018c0)) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000002100)={0x1, "9e87c7f0a020704c3aa6ce2a07866df793852ca9463af1fab9894ca169364632", 0x3, 0xfffffffffffffffb, 0x710, 0xe0, 0xe}) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000002180)) r5 = syz_open_dev$cec(&(0x7f00000021c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) ioctl$void(r5, 0x5450) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002200)=0x0) r7 = syz_open_procfs(r6, &(0x7f0000002240)='net/raw\x00') fcntl$setstatus(r0, 0x4, 0x4400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000002380)={&(0x7f0000002280)=[0x0], &(0x7f00000022c0)=[0x0, 0x0], &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x1, 0x2, 0x9, 0x3}) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000023c0)) sendmsg$nl_generic(r7, &(0x7f00000046c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004680)={&(0x7f0000002440)={0x2208, 0x3b, 0x400, 0x70bd27, 0x25dfdbfd, {0xf}, [@typed={0xc, 0x6a, @u64=0x5}, @nested={0x21e8, 0x6f, [@typed={0x14, 0x63, @ipv6=@dev={0xfe, 0x80, [], 0x24}}, @generic="b0c2c0fbcdfdfa09d3e3a7a2ead041f07a8f146514e1cf3fb914aea3d02b60440500ea78ed28657e9d19810166f2acddf9b7c8eeae9857ea242b328dda383d51ef85b989ab0e6c64c88d3a0b8fe6744dc8c54bf8471b03ac965af1945e764f294e2d22bcc781966c4cc1bfcabc173a04d51c0b2d266f44", @generic="8e8a4a465b3be0dcf4b4f2af87af9fccee88d881b272017f2222c1634dc3bdcbe3ff1d73eaddc30631f5ab8e16ea27299286a02366ddfcce64691b016b4f1482e711fa0d7e4d9fa9547ff736e3e1121b6470ea89d426e6989d4cabd196327fc428d4a79a9bd8b33700326c0c733c5445ba13400aa576ff4a7b76e21e781236f52ada9b6e633850ed2abdb160879db9ba7252cf92cf07500a4129dc99673b969c13e04897a956b5c25a5ea4c5184e3ba4acf05c823a8999754f10e12eeb4046b92d883653fc", @typed={0x8, 0x7a, @u32=0x6}, @generic, @generic="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", @generic="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", @generic="248fb94ce5a4b54e1074a8fad713fcbbd2cab167f0bb41e8e0e0435c1c9a5fe6ee0da16c4c69c52779361c025f759828e1cea951a0c50ffd7388f7f29f82ccfe471e4d7d1b2278e276182019b2c4df1d25af08f7ba899a2b8d863a549049cefacc5fe7e80f00f87a3ad5e71bc6d569d379f40e1dfa4d2b81ee31", @typed={0x8, 0x75, @uid=r1}, @typed={0x8, 0x60, @uid=r1}]}]}, 0x2208}, 0x1, 0x0, 0x0, 0x80}, 0x40000) fstat(r5, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000004780)=[0x0, 0xee01]) fchown(r2, r8, r9) 05:58:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 977.583679][T12254] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 977.583687][T12254] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 977.583694][T12254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 977.583701][T12254] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:38 executing program 3 (fault-call:3 fault-nth:14): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3de}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:38 executing program 4: r0 = socket(0x40000000006, 0x8003, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000140)) r1 = accept(r0, &(0x7f0000000080)=@ax25={{}, [@remote, @bcast, @bcast, @netrom, @rose, @rose, @netrom, @default]}, &(0x7f0000000100)=0x80) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@local, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x20, 0x7f, 0x0, r2}, {0xf, 0x100, 0x9, 0x1, 0x1ec0000000, 0x100000001, 0xa56, 0x101}, {0x8001, 0x3, 0x6, 0xffffffffffff8000}, 0x734a7da9, 0x6e6bb3, 0x2, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d5, 0x33}, 0x2, @in=@broadcast, 0x3503, 0x0, 0x3, 0x7, 0xfff, 0xff, 0x9e5e}}, 0xe8) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:58:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x141000, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x3, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:38 executing program 1: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x6, 0x100000000, 0x4, 0x9, 0x0, 0x2, 0x910, 0xa, 0x2, 0x1f, 0x0, 0xfffffffffffffff7, 0x40, 0xbcc, 0x4, 0x20, 0x1, 0x3, 0x7fffffff, 0x1, 0x3, 0x9, 0x8000, 0xd0a, 0x1f, 0x0, 0x2, 0x2, 0x4, 0x0, 0x3, 0x1800000000, 0x1, 0x8, 0xff, 0xd9f, 0x0, 0x7, 0x4, @perf_config_ext={0x9, 0x80}, 0x1c0, 0xfff, 0x6, 0x5, 0x6, 0x6, 0x7}, r2, 0x2, r0, 0x0) fchdir(r1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 'syz1\x00', 0x7ff}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204006902000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x4) 05:58:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:38 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x3d3295d3, 0xa6}}, 0x30) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000100)=0x60, 0x2) ioctl$void(r0, 0x40005450) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) modify_ldt$read(0x0, &(0x7f0000000080)=""/43, 0x2b) 05:58:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [], @multicast1}, 0x9, 0x2, 0xff, 0x7, 0x1000, 0xe8e}, &(0x7f0000000140)=0x20) setpriority(0x0, 0x0, 0x0) 05:58:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 978.171932][ T26] audit: type=1326 audit(1556776718.312:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12626 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:38 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x1, 0x0, 0xffffffffffffff03}) [ 978.228035][T12629] FAULT_INJECTION: forcing a failure. [ 978.228035][T12629] name failslab, interval 1, probability 0, space 0, times 0 05:58:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 978.309635][T12629] CPU: 1 PID: 12629 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 978.317699][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.327766][T12629] Call Trace: [ 978.331074][T12629] dump_stack+0x172/0x1f0 [ 978.335430][T12629] should_fail.cold+0xa/0x15 [ 978.340038][T12629] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 978.345862][T12629] ? ___might_sleep+0x163/0x280 [ 978.350732][T12629] __should_failslab+0x121/0x190 [ 978.355685][T12629] should_failslab+0x9/0x14 [ 978.360200][T12629] kmem_cache_alloc+0x2b2/0x6f0 [ 978.365515][T12629] vm_area_alloc+0x20/0x110 [ 978.370030][T12629] __do_execve_file.isra.0+0xc34/0x23f0 [ 978.375600][T12629] ? copy_strings_kernel+0x110/0x110 [ 978.380898][T12629] ? strncpy_from_user+0x2a8/0x380 [ 978.386026][T12629] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 978.392276][T12629] __x64_sys_execveat+0xed/0x130 [ 978.397223][T12629] do_syscall_64+0x103/0x610 [ 978.401821][T12629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 978.407722][T12629] RIP: 0033:0x458da9 [ 978.411615][T12629] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 978.431225][T12629] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 978.439649][T12629] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 978.447604][T12629] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 978.455577][T12629] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 978.463532][T12629] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 978.471485][T12629] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:39 executing program 3 (fault-call:3 fault-nth:15): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:39 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @multicast1, 0x0}, &(0x7f0000000080)=0xc) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000000c0)=0xffffffff00000001, 0x4) r2 = epoll_create(0xb23e) setns(r0, 0x8020000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x2, 0x1, 0x6, 0x3, 0x8}}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000140)={0x7, 0x2, 0x4326785f, 0x0, 0x9, 0x2, 0xa1e, 0x2, 0x8, 0xffffffffffffffda, 0x1, 0xfffffffffffffff7, 0x0, 0x4, 0x63e6, 0x7c, 0x6, 0xc55, 0x6}) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) fsetxattr$security_smack_entry(r0, &(0x7f0000000200)='security.SMACK64IPIN\x00', &(0x7f0000000240)='NETMAP\x00', 0x7, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000280)=0x6, 0x4) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x100, 0xb, 0x0, 0x0, "5e5de285ec71e23e9b1e6d267c299a0fe86e288c9dce14452dea47b52561b04f826759a0ec1cc23acb3de52cee933083a7ffe77a6d85376e1329262854fcdf23", "517e4914cf6332792fa61e6407046f7b1fc1a2ea06e6c18b7a01652cfa229c5d", [0x4]}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000380)='NET_DM\x00') pidfd_send_signal(r0, 0x19, &(0x7f00000003c0)={0x10, 0x53b, 0x7}, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000500)={0x0, 0x0, 0x9, [], &(0x7f00000004c0)=0x1f}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'caif0\x00', r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r0, 0x10, &(0x7f00000006c0)={&(0x7f00000005c0)=""/215, 0xd7, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r0, 0x10, &(0x7f0000000740)={&(0x7f0000000580), 0x0, r3}}, 0x10) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000007c0)='trusted.overlay.nlink\x00', &(0x7f0000000800)={'L-', 0x5d}, 0x28, 0x2) fcntl$getownex(r2, 0x10, &(0x7f0000000840)) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000880)={0x5, 0x3, 0x3b, 0x288, 0x0, 0x400, 0x4}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f00000008c0)={0x20000000}) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000900)={0x64, "5917dcadf86855baf6484bab818fb2559c1ec44864ce7d9a37c2c4df44ccb20b29c166a434ae8bf9dd63c3c6911236759bf17086c90a8044416d4261ca9836a6ccce416bb4cad2f07b76472053041b98d38c0b882693a6f5e85e7713cb8ee05594ea50fc247e500969b3f2d7be478cda774a9f029b72f61673ba9b15a06700c6"}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x80) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) userfaultfd(0x80000) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000009c0)={0xa6f, 0x8, 0x4, 0x5}) openat$random(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/urandom\x00', 0x40200, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000a40)={@rand_addr, @multicast2}, &(0x7f0000000a80)=0x8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xcc, r4, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x54d9853b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x758d}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x20004001) 05:58:39 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000004c80)='/dev/audio#\x00', 0x450, 0x400140) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000004cc0), &(0x7f0000004d00)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x2a9d}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x0, 0x10}, &(0x7f0000000140)=0xc) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x36043, 0x0) openat$cgroup(r2, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RCLUNK(r3, &(0x7f0000000100)={0x8b}, 0x7) fallocate(r4, 0x0, 0x0, 0x2000002) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x1000000, 0x2001}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x2}, &(0x7f0000000200)=0x8) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc9310e7e93f319bd070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/31) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x220, 0x0, 0x0, 0x10000007a) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x200000485]}) 05:58:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 979.041691][ T26] audit: type=1326 audit(1556776719.175:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12866 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x800000000004400, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) 05:58:39 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000000c0)=0x40, 0x4) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="a6f400c57057c31c4d1e906ac654bb6a49b0307bcf4b3466a528f2b22ff182ff4c84c469acfbab88e32830cb8e57292b97840e4be3bd7f991673b3d018529dced2c8bcdc77e4b42695a1fad668e6d78b982b7f1845ec01c17a335e0963a01bc499d97b6be9ad87bf76f35a3678c35513805a7ed813183eb599a25332850cfc3871db17af9f6b56fae89f3c6f4bbe1f2ff3ea47fe1cb72ba546b8516d5fe3522b4c4ef198ba28e118e832e510fbf406c5da6f9696492adc3a9e6738a12efd464d", 0xc0, 0x0) keyctl$assume_authority(0x10, r1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x7c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2800000000000000290000000200000001000000486762c5c95594b1f20000000000000000040000"], 0x28}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x2ac, 0x0) [ 979.112103][T12870] FAULT_INJECTION: forcing a failure. [ 979.112103][T12870] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:58:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 979.196099][T12870] CPU: 1 PID: 12870 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 979.204135][T12870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.214195][T12870] Call Trace: [ 979.217507][T12870] dump_stack+0x172/0x1f0 [ 979.221866][T12870] should_fail.cold+0xa/0x15 [ 979.226473][T12870] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 979.232292][T12870] ? ___might_sleep+0x163/0x280 [ 979.237164][T12870] should_fail_alloc_page+0x50/0x60 05:58:39 executing program 1: syz_execute_func(&(0x7f0000000000)="b13b91cd80660ff1b842bc3b8dd0d0c44139fd5bf91cc55868f4a95ff9c4418d71f08bc4c161c4fa2bea04efc48192558dc3c36645c42142518ca1ef0000002ef3470f5bda7c7c730f453d25090000660ffe4bf3c401fe5ff6e3df646736676666430fefb300000000e40804f40f1a12111d4b115000") r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x4, 0x49341ab1, 0x40, 0xffff, 0x17, 0x7, 0x6, 0x3210, 0x5aee, 0x1000, 0x2, 0x1}) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000000c0)={[{0x5, 0x5, 0x4, 0x80, 0x4, 0x7fffffff, 0x10000, 0x9, 0xc3, 0x100000001, 0x6b9, 0x0, 0x292}, {0x8001, 0x2, 0x2, 0xc72, 0x20, 0xffffffff, 0x6, 0x7, 0x7fff, 0x0, 0x9, 0x9, 0x636}, {0x7, 0x0, 0x20, 0xbb, 0x5, 0x7, 0x0, 0x1, 0x30000000000, 0x1, 0x0, 0xa6d, 0x7fffffff}], 0x8}) [ 979.242463][T12870] __alloc_pages_nodemask+0x1a1/0x8d0 [ 979.247850][T12870] ? __mark_inode_dirty+0x23c/0x1290 [ 979.253146][T12870] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 979.258879][T12870] ? touch_atime+0x1b3/0x2a0 [ 979.263473][T12870] ? find_held_lock+0x35/0x130 [ 979.268247][T12870] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 979.274495][T12870] alloc_pages_current+0x107/0x210 [ 979.279616][T12870] get_zeroed_page+0x14/0x50 [ 979.284232][T12870] __pud_alloc+0x3b/0x250 [ 979.288597][T12870] __handle_mm_fault+0x7a5/0x3ec0 [ 979.293653][T12870] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 979.299203][T12870] ? find_held_lock+0x35/0x130 [ 979.303969][T12870] ? handle_mm_fault+0x322/0xb30 [ 979.308922][T12870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 979.315171][T12870] ? kasan_check_read+0x11/0x20 [ 979.320035][T12870] handle_mm_fault+0x43f/0xb30 [ 979.324816][T12870] __get_user_pages+0x7b6/0x1a40 [ 979.329786][T12870] ? follow_page_mask+0x19a0/0x19a0 [ 979.329809][T12870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 979.329831][T12870] get_user_pages_remote+0x21d/0x440 [ 979.341242][T12870] copy_strings.isra.0+0x3dc/0x890 [ 979.341270][T12870] ? remove_arg_zero+0x590/0x590 [ 979.356581][T12870] ? prepare_binprm+0x6aa/0x940 [ 979.361444][T12870] ? lock_downgrade+0x880/0x880 [ 979.368831][T12870] ? vma_link+0x117/0x180 [ 979.373167][T12870] ? install_exec_creds+0x180/0x180 [ 979.378380][T12870] copy_strings_kernel+0xa5/0x110 [ 979.383406][T12870] __do_execve_file.isra.0+0x10ef/0x23f0 [ 979.389031][T12870] ? copy_strings_kernel+0x110/0x110 [ 979.394305][T12870] ? strncpy_from_user+0x2a8/0x380 [ 979.399402][T12870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 979.405630][T12870] __x64_sys_execveat+0xed/0x130 [ 979.410561][T12870] do_syscall_64+0x103/0x610 [ 979.415136][T12870] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.421005][T12870] RIP: 0033:0x458da9 [ 979.424879][T12870] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 979.444465][T12870] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 979.452863][T12870] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 979.460849][T12870] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 979.468805][T12870] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 979.476770][T12870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 979.484737][T12870] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:39 executing program 3 (fault-call:3 fault-nth:16): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7fffffff, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc0285628, &(0x7f0000000040)) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x2, r2, 0x1}) 05:58:39 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400040, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) r1 = getpgrp(0x0) getpgid(r1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) setpgid(r2, r3) 05:58:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:39 executing program 1: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() request_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000100)='\x00', 0xfffffffffffffffd) gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x20) wait4(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3f, 0x10000) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x5, &(0x7f0000000140)=0x4) 05:58:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde03}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 979.889334][T13304] QAT: Invalid ioctl [ 979.901964][ T26] audit: type=1326 audit(1556776720.028:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13305 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 979.962882][T13384] FAULT_INJECTION: forcing a failure. [ 979.962882][T13384] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 980.001163][T13384] CPU: 0 PID: 13384 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 980.009197][T13384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.019253][T13384] Call Trace: [ 980.019282][T13384] dump_stack+0x172/0x1f0 [ 980.019302][T13384] should_fail.cold+0xa/0x15 [ 980.019320][T13384] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 980.019337][T13384] ? ___might_sleep+0x163/0x280 [ 980.019366][T13384] should_fail_alloc_page+0x50/0x60 [ 980.037363][T13384] __alloc_pages_nodemask+0x1a1/0x8d0 [ 980.052748][T13384] ? __pud_alloc+0x1d3/0x250 [ 980.057361][T13384] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 980.063087][T13384] ? __pud_alloc+0x1d3/0x250 [ 980.067691][T13384] ? lock_downgrade+0x880/0x880 [ 980.072555][T13384] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 980.078799][T13384] alloc_pages_current+0x107/0x210 [ 980.078824][T13384] __pmd_alloc+0x41/0x460 [ 980.088237][T13384] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 980.094479][T13384] __handle_mm_fault+0x192a/0x3ec0 [ 980.099612][T13384] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 980.105163][T13384] ? find_held_lock+0x35/0x130 [ 980.109941][T13384] ? handle_mm_fault+0x322/0xb30 [ 980.114887][T13384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.114906][T13384] ? kasan_check_read+0x11/0x20 [ 980.114924][T13384] handle_mm_fault+0x43f/0xb30 [ 980.114944][T13384] __get_user_pages+0x7b6/0x1a40 [ 980.114967][T13384] ? follow_page_mask+0x19a0/0x19a0 [ 980.114986][T13384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.135724][T13384] get_user_pages_remote+0x21d/0x440 [ 980.135749][T13384] copy_strings.isra.0+0x3dc/0x890 [ 980.157550][T13384] ? remove_arg_zero+0x590/0x590 [ 980.162492][T13384] ? prepare_binprm+0x6aa/0x940 [ 980.167365][T13384] ? lock_downgrade+0x880/0x880 [ 980.172217][T13384] ? vma_link+0x117/0x180 [ 980.176546][T13384] ? install_exec_creds+0x180/0x180 [ 980.181744][T13384] copy_strings_kernel+0xa5/0x110 [ 980.186766][T13384] __do_execve_file.isra.0+0x10ef/0x23f0 [ 980.192395][T13384] ? copy_strings_kernel+0x110/0x110 [ 980.192410][T13384] ? strncpy_from_user+0x2a8/0x380 [ 980.192428][T13384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 05:58:40 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 05:58:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:40 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) [ 980.192450][T13384] __x64_sys_execveat+0xed/0x130 [ 980.216070][T13384] do_syscall_64+0x103/0x610 [ 980.220679][T13384] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.226575][T13384] RIP: 0033:0x458da9 [ 980.230475][T13384] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.250135][T13384] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 980.250149][T13384] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 980.250156][T13384] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 980.250164][T13384] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 980.250172][T13384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 980.250179][T13384] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 [ 980.329599][ T26] audit: type=1800 audit(1556776720.444:88): pid=13524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=3 res=0 [ 980.384883][ T26] audit: type=1804 audit(1556776720.444:89): pid=13524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir511471804/syzkaller.08APuo/1956/file0/file0" dev="loop4" ino=3 res=1 05:58:40 executing program 3 (fault-call:3 fault-nth:17): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="470f52e94a2be93699980f053ef3aec4a37bf0c50241e2e9450fe36a09c462f1920cbcc4027d30ef420f5a1ea35500262ff3906646da4e329200d2dec461dc55b13e410f3809132525000e818f470f94c967450f289369000000b100673e66470f0fa21900000090853665f3490f2cf18fe97c810f69e08f4cbec5c4c2858c3f8f56388d2b0000000f01d4dfc5497dbfed304715156f2a37ad59438f34b267f36ab4c4c2e9adc2564105ba16f2ae263ef367650f0fb30080000094c4c29d962150386c6cb3f9b3f9491feefe8f08e4a25600b1500909660fdf530967410f58d1e289e2897474e4b6c1f0433e660feee4440f704eee9846dec43b7d0f12e400f4c4617be6d2c4017a7fc3c4c1225cf909912af3430f47bb00000000000045126d6d8450000000c44299deb76a5babb9c421f9e759003e65660f5cb54c0a0000dd4805c462a52b6e0b8fa810ecd6091a1af20fa576acffff65d085431fe720bd7c6d83004577cbf043806d040ef4b0f43ef3430faedf1002970606b2aa8fa8689fb900100002dac422e6912cb18374fb0a0766440fe5bf2c470000f247acc4a2dd910cb1ed36660f38058b976192361d09f4f5e5978847915e02c1045c0b47cc47cc5c389f9f060f0f2ef217640f28006c6c01a9bb000042d8fb4974ec0b31c422358c083422") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:40 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x103000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7f, 0x4) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0x59800000000, &(0x7f0000000100)=0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000180)=""/223, &(0x7f0000000280)=0xdf) 05:58:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:40 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:40 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 980.769941][ T26] audit: type=1326 audit(1556776720.890:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13755 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 980.825220][T13823] FAULT_INJECTION: forcing a failure. [ 980.825220][T13823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:58:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000380), &(0x7f0000000400)=0x4) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x40, 0x7fff, 0x92c, @time={0x0, 0x989680}, {0x4, 0x7fff}, {0x2, 0x7fff}, @control={0x9, 0x80000001, 0x9}}, {0x1, 0x8001, 0x3, 0xa5e, @tick=0x4, {0x2}, {0x6, 0x20}, @control={0x401, 0x9, 0x4}}, {0xff, 0x400, 0x100000000, 0x8001, @tick=0xfffffffffffffff8, {0x9, 0x40}, {0x100000000, 0x800}, @raw8={"82bf1eb8678a60f9ca7b7ced"}}, {0x5, 0xb9, 0x40, 0xffffffffab3845be, @tick=0x100000001, {0x6, 0x100000000}, {0x6, 0x6}, @quote={{0x40, 0x1}, 0x8614, &(0x7f0000000080)={0xfffffffffffffff9, 0x8, 0x244c5097, 0x0, @time={0x77359400}, {0x9156, 0x9afa47e}, {0xffffffff, 0x6}, @addr={0xe720000, 0xfff}}}}, {0x9, 0x2, 0x9, 0x9, @time={0x77359400}, {0x9, 0xd8}, {0x8269, 0x7f}, @time=@time={0x0, 0x989680}}, {0x8, 0x6, 0x0, 0x5, @tick=0x3, {0x7, 0x10001}, {0x4, 0x3}, @ext={0x42, &(0x7f00000000c0)="32ee5249637fba4eef0f30693c23aecbc5d75f4670e120969be065d386d4b3e1986ed976855800ed818136a84ba825e8ea50092b064588a48747df391fe2c8f07fdd"}}], 0x120) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={@remote={[], 0x2}, 0xa, 'nlmon0\x00'}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000480)=0x4) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) [ 980.936616][T13823] CPU: 0 PID: 13823 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 980.944667][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.954730][T13823] Call Trace: [ 980.958030][T13823] dump_stack+0x172/0x1f0 [ 980.962547][T13823] should_fail.cold+0xa/0x15 [ 980.967153][T13823] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 980.972972][T13823] ? ___might_sleep+0x163/0x280 [ 980.977849][T13823] should_fail_alloc_page+0x50/0x60 05:58:41 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5410000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 980.983062][T13823] __alloc_pages_nodemask+0x1a1/0x8d0 [ 980.988455][T13823] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 980.994206][T13823] ? kasan_check_write+0x14/0x20 [ 980.999156][T13823] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 980.999175][T13823] alloc_pages_current+0x107/0x210 [ 980.999196][T13823] pte_alloc_one+0x1b/0x1a0 [ 980.999213][T13823] __pte_alloc+0x20/0x310 [ 980.999231][T13823] __handle_mm_fault+0x3391/0x3ec0 [ 980.999251][T13823] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 980.999266][T13823] ? find_held_lock+0x35/0x130 [ 980.999281][T13823] ? handle_mm_fault+0x322/0xb30 [ 980.999304][T13823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.999321][T13823] ? kasan_check_read+0x11/0x20 [ 980.999340][T13823] handle_mm_fault+0x43f/0xb30 [ 980.999360][T13823] __get_user_pages+0x7b6/0x1a40 [ 980.999385][T13823] ? follow_page_mask+0x19a0/0x19a0 [ 980.999405][T13823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.999429][T13823] get_user_pages_remote+0x21d/0x440 [ 980.999455][T13823] copy_strings.isra.0+0x3dc/0x890 [ 980.999495][T13823] ? remove_arg_zero+0x590/0x590 [ 980.999509][T13823] ? prepare_binprm+0x6aa/0x940 [ 980.999523][T13823] ? lock_downgrade+0x880/0x880 [ 980.999535][T13823] ? vma_link+0x117/0x180 [ 980.999551][T13823] ? install_exec_creds+0x180/0x180 [ 980.999570][T13823] copy_strings_kernel+0xa5/0x110 [ 980.999589][T13823] __do_execve_file.isra.0+0x10ef/0x23f0 [ 980.999614][T13823] ? copy_strings_kernel+0x110/0x110 [ 980.999630][T13823] ? strncpy_from_user+0x2a8/0x380 [ 980.999648][T13823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.999668][T13823] __x64_sys_execveat+0xed/0x130 [ 980.999689][T13823] do_syscall_64+0x103/0x610 [ 980.999710][T13823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.999722][T13823] RIP: 0033:0x458da9 [ 980.999735][T13823] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.999743][T13823] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 980.999758][T13823] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 980.999766][T13823] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 980.999775][T13823] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 980.999783][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 980.999792][T13823] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 [ 981.399019][ T26] audit: type=1800 audit(1556776721.505:91): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=4 res=0 [ 981.419933][ T26] audit: type=1804 audit(1556776721.505:92): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir688718688/syzkaller.ApGKNe/2506/file0/file0" dev="loop1" ino=4 res=1 05:58:41 executing program 3 (fault-call:3 fault-nth:18): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:41 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:41 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) r1 = request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='/dev/sequencer\x00', 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, r1, r2) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000080)=0x2) 05:58:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:41 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 981.671903][ T26] audit: type=1326 audit(1556776721.783:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14212 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 981.730932][T14322] FAULT_INJECTION: forcing a failure. [ 981.730932][T14322] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 981.816315][T14322] CPU: 0 PID: 14322 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 981.824347][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.834408][T14322] Call Trace: [ 981.837724][T14322] dump_stack+0x172/0x1f0 [ 981.842068][T14322] should_fail.cold+0xa/0x15 [ 981.846680][T14322] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 981.852501][T14322] ? ___might_sleep+0x163/0x280 [ 981.857365][T14322] should_fail_alloc_page+0x50/0x60 05:58:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) r1 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/dev/sequencer\x00', 0xfffffffffffffff9) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() keyctl$chown(0x4, r1, r2, r3) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time, {0x5, 0x80fffff0}, {}, @quote}], 0x30) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000200)='dummy0\x00') 05:58:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:42 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) [ 981.862569][T14322] __alloc_pages_nodemask+0x1a1/0x8d0 [ 981.867949][T14322] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 981.873682][T14322] ? kasan_check_write+0x14/0x20 [ 981.878624][T14322] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 981.884877][T14322] alloc_pages_current+0x107/0x210 [ 981.889986][T14322] pte_alloc_one+0x1b/0x1a0 [ 981.894481][T14322] __pte_alloc+0x20/0x310 [ 981.894499][T14322] __handle_mm_fault+0x3391/0x3ec0 [ 981.894519][T14322] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 981.894534][T14322] ? find_held_lock+0x35/0x130 [ 981.894551][T14322] ? handle_mm_fault+0x322/0xb30 [ 981.894574][T14322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.894591][T14322] ? kasan_check_read+0x11/0x20 [ 981.894608][T14322] handle_mm_fault+0x43f/0xb30 [ 981.894627][T14322] __get_user_pages+0x7b6/0x1a40 [ 981.930306][T14322] ? follow_page_mask+0x19a0/0x19a0 [ 981.945161][T14322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.951407][T14322] get_user_pages_remote+0x21d/0x440 [ 981.951442][T14322] copy_strings.isra.0+0x3dc/0x890 [ 981.951468][T14322] ? remove_arg_zero+0x590/0x590 [ 981.966755][T14322] ? prepare_binprm+0x6aa/0x940 [ 981.971613][T14322] ? lock_downgrade+0x880/0x880 [ 981.976477][T14322] ? vma_link+0x117/0x180 [ 981.980814][T14322] ? install_exec_creds+0x180/0x180 [ 981.986010][T14322] copy_strings_kernel+0xa5/0x110 [ 981.991044][T14322] __do_execve_file.isra.0+0x10ef/0x23f0 [ 981.996685][T14322] ? copy_strings_kernel+0x110/0x110 [ 981.996702][T14322] ? strncpy_from_user+0x2a8/0x380 [ 981.996720][T14322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 981.996738][T14322] __x64_sys_execveat+0xed/0x130 [ 981.996758][T14322] do_syscall_64+0x103/0x610 [ 981.996775][T14322] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.996790][T14322] RIP: 0033:0x458da9 [ 982.018285][T14322] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.018294][T14322] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 982.018309][T14322] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 982.018317][T14322] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 982.018325][T14322] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 982.018337][T14322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 982.052262][T14322] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 [ 982.254506][ T26] audit: type=1800 audit(1556776722.358:94): pid=14530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=5 res=0 [ 982.274835][ T26] audit: type=1804 audit(1556776722.358:95): pid=14530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir688718688/syzkaller.ApGKNe/2508/file0/file0" dev="loop1" ino=5 res=1 05:58:42 executing program 3 (fault-call:3 fault-nth:19): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:42 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:42 executing program 2: r0 = creat(0x0, 0x140) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000480)=ANY=[], 0x0) rt_sigprocmask(0x0, 0x0, &(0x7f0000000140), 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f00000005c0)) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x80) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x3f, 0xc60, 0x202, 0xfffffffffffffffe, 0x200, 0x8, 0x5}, 0x20) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) keyctl$get_security(0x11, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet6_dccp_int(r2, 0x21, 0x3, &(0x7f00000004c0)=0xf2, 0x4) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000240)={'syz'}, 0x0, 0xfffffffffffffff8) r4 = eventfd(0x4) signalfd4(r4, &(0x7f0000000100)={0x1}, 0x8, 0x800) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xec3, 0x204082) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae09, &(0x7f00000000c0)=""/10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) quotactl(0x2, &(0x7f0000000280)='./bus/../file0\x00', r6, &(0x7f0000000300)="144768b015683ce703eba20b1f9cdc0913059a9cd673f3fb4f6a3b9117e9241c0581d2218e7cbb177d7b43dea50d7594a16235074f62e8307e2927f219acddcd528cd7c60d95b024300fca59d933e34c58343e8c8e9fe3ada595386382f6da682c43d3beb39cd58bb8f72a9a8ea3e2299370967faabc") r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x5, 0x0) write$sndseq(r7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:42 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) 05:58:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 982.571424][ T26] audit: type=1800 audit(1556776722.666:96): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=6 res=0 05:58:42 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) [ 982.629931][T14592] FAULT_INJECTION: forcing a failure. [ 982.629931][T14592] name failslab, interval 1, probability 0, space 0, times 0 [ 982.656006][ T26] audit: type=1804 audit(1556776722.705:97): pid=14542 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir688718688/syzkaller.ApGKNe/2509/file0/file0" dev="loop1" ino=6 res=1 [ 982.693969][ T26] audit: type=1326 audit(1556776722.715:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14547 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 982.696976][T14592] CPU: 0 PID: 14592 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 05:58:42 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r0, 0x0, 0xf, &(0x7f0000000080)='/dev/sequencer\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000180)={{0x5, 0x3, 0x7f, 0x238, 'syz0\x00', 0x9}, 0x0, 0x70, 0xbc1, r1, 0x8, 0x9, 'syz1\x00', &(0x7f0000000300)=['/dev/sequencer\x00', '/dev/sequencer\x00', '/dev/sequencer\x00', 'keyring}\x00', '\x00', 'system\x00', 'syz0\x00', '/dev/sequencer\x00'], 0x52, [], [0x4, 0xfffffffffffefffe, 0x4, 0x1ff]}) 05:58:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 982.723690][T14592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.733746][T14592] Call Trace: [ 982.737041][T14592] dump_stack+0x172/0x1f0 [ 982.741381][T14592] should_fail.cold+0xa/0x15 [ 982.745996][T14592] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 982.751819][T14592] ? ___might_sleep+0x163/0x280 [ 982.756681][T14592] __should_failslab+0x121/0x190 [ 982.761625][T14592] should_failslab+0x9/0x14 [ 982.766141][T14592] kmem_cache_alloc+0x2b2/0x6f0 [ 982.771178][T14592] ? __might_sleep+0x95/0x190 [ 982.775883][T14592] __anon_vma_prepare+0x62/0x3c0 [ 982.780820][T14592] ? __pte_alloc+0x1ba/0x310 [ 982.785429][T14592] __handle_mm_fault+0x34db/0x3ec0 [ 982.790546][T14592] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 982.796094][T14592] ? find_held_lock+0x35/0x130 [ 982.800941][T14592] ? handle_mm_fault+0x322/0xb30 [ 982.805866][T14592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.812098][T14592] ? kasan_check_read+0x11/0x20 [ 982.816932][T14592] handle_mm_fault+0x43f/0xb30 [ 982.821683][T14592] __get_user_pages+0x7b6/0x1a40 [ 982.826696][T14592] ? follow_page_mask+0x19a0/0x19a0 [ 982.831880][T14592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.838108][T14592] get_user_pages_remote+0x21d/0x440 [ 982.843378][T14592] copy_strings.isra.0+0x3dc/0x890 [ 982.848477][T14592] ? remove_arg_zero+0x590/0x590 [ 982.853407][T14592] ? prepare_binprm+0x6aa/0x940 [ 982.858269][T14592] ? lock_downgrade+0x880/0x880 [ 982.863111][T14592] ? vma_link+0x117/0x180 [ 982.867429][T14592] ? install_exec_creds+0x180/0x180 [ 982.872607][T14592] copy_strings_kernel+0xa5/0x110 [ 982.877613][T14592] __do_execve_file.isra.0+0x10ef/0x23f0 [ 982.883250][T14592] ? copy_strings_kernel+0x110/0x110 [ 982.888530][T14592] ? strncpy_from_user+0x2a8/0x380 [ 982.893626][T14592] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.899849][T14592] __x64_sys_execveat+0xed/0x130 [ 982.904772][T14592] do_syscall_64+0x103/0x610 [ 982.909349][T14592] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.915231][T14592] RIP: 0033:0x458da9 [ 982.919113][T14592] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.938698][T14592] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 982.947087][T14592] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 982.955044][T14592] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 982.963001][T14592] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 982.970956][T14592] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 982.978905][T14592] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:43 executing program 4: 05:58:43 executing program 3 (fault-call:3 fault-nth:20): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="470f52e94a2be93699980f053ef3aec4a37bf0c50241e2e9450fe36a09c462f1920cbcc4027d30ef420f5a1ea35500262ff3906646da4e329200d2dec461dc55b13e410f3809132525000e818f470f94c967450f289369000000b100673e66470f0fa21900000090853665f3490f2cf18fe97c810f69e08f4cbec5c4c2858c3f8f56388d2b0000000f01d4dfc5497dbfed304715156f2a37ad59438f34b267f36ab4c4c2e9adc2564105ba16f2ae263ef367650f0fb30080000094c4c29d962150386c6cb3f9b3f9491feefe8f08e4a25600b1500909660fdf530967410f58d1e289e2897474e4b6c1f0433e660feee4440f704eee9846dec43b7d0f12e400f4c4617be6d2c4017a7fc3c4c1225cf909912af3430f47bb00000000000045126d6d8450000000c44299deb76a5babb9c421f9e759003e65660f5cb54c0a0000dd4805c462a52b6e0b8fa810ecd6091a1af20fa576acffff65d085431fe720bd7c6d83004577cbf043806d040ef4b0f43ef3430faedf1002970606b2aa8fa8689fb900100002dac422e6912cb18374fb0a0766440fe5bf2c470000f247acc4a2dd910cb1ed36660f38058b976192361d09f4f5e5978847915e02c1045c0b47cc47cc5c389f9f060f0f2ef217640f28006c6c01a9bb000042d8fb4974ec0b31c422358c083422") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:43 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x6, 0x0) fadvise64(r0, 0x0, 0xfffffffffffffff8, 0x5) 05:58:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:43 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:43 executing program 4: 05:58:43 executing program 4: 05:58:43 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 983.455407][ T26] audit: type=1326 audit(1556776723.548:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14883 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 983.509312][T14928] FAULT_INJECTION: forcing a failure. [ 983.509312][T14928] name failslab, interval 1, probability 0, space 0, times 0 05:58:43 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000022c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002300)={0x8, 0xb, 0x4, 0x0, {r1, r2/1000+30000}, {0x3, 0xc, 0x5, 0x287e, 0x100000001, 0x3000000, '.FEL'}, 0x8, 0x2, @fd=0xffffffffffffffff, 0x4}) r4 = syz_open_dev$radio(&(0x7f0000002380)='/dev/radio#\x00', 0x1, 0x2) r5 = socket$caif_seqpacket(0x25, 0x5, 0x2) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002400)={&(0x7f00000023c0)='./file0\x00'}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002440)={0x0, 0x6, 0x10}, 0xc) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002480)='/dev/autofs\x00', 0x2, 0x0) r9 = socket(0x1, 0x2, 0xb13) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000025c0)={&(0x7f0000002580)='/dev/sequencer\x00', 0xffffffffffffff9c}, 0x10) r11 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002600)={{{@in=@local, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000002700)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000027c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002800)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000002900)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002940)={0x0, 0x0, 0x0}, &(0x7f0000002980)=0xc) r17 = gettid() stat(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002a80)=0x0) lstat(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = socket$nl_generic(0x10, 0x3, 0x10) r24 = socket$inet_dccp(0x2, 0x6, 0x0) r25 = syz_open_dev$dmmidi(&(0x7f0000002c00)='/dev/dmmidi#\x00', 0x6, 0x10000) r26 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004440)={&(0x7f0000004140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x118, 0x100000000, {"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"}}, {0x0, "45f44f8be8d23f81245901ce6b2b725e9a4753d96fb4312c5413f3d8f3a79f6c975ea53eac641988631b72035c257604d57a125c0303fc16235b63aa2d072bec781c03e03486677285d07cc473005e5dae1d4063365b53fec3d0d80d8dcc7e91a17ab1663d5e7e3ba2c1883d11bbbb94cc369b10c780161b1d6ce5bd4694222bdb01eb572e75a0b3ca8ac5dfc3da3e7d17823379d75252b5119eb4b131c137720c1fff258951c3e89c5f8ea0a1c80ebfbf71627c8ab7736b44f06c9c84"}}, &(0x7f0000004340)=""/196, 0x1d7, 0xc4, 0x1}, 0x20) r27 = socket$isdn(0x22, 0x3, 0x11) r28 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000004480)='/dev/snapshot\x00', 0x2c0201, 0x0) r29 = socket$inet(0x2, 0x2, 0x4) r30 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r31 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000044c0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004500)={0x0, 0x0}, &(0x7f0000004540)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004580)={0x0, 0x0, 0x0}, &(0x7f00000045c0)=0xc) r35 = socket$xdp(0x2c, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000004600)={0x0, 0x80000, 0xffffffffffffff9c}) r37 = socket$bt_rfcomm(0x1f, 0x0, 0x3) r38 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000004640)='/dev/video0\x00', 0x2, 0x0) r39 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r40 = openat(0xffffffffffffff9c, &(0x7f0000004680)='./file0\x00', 0x46800, 0x4) r41 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r42 = openat$fuse(0xffffffffffffff9c, &(0x7f00000046c0)='/dev/fuse\x00', 0x2, 0x0) r43 = syz_open_pts(0xffffffffffffff9c, 0x80) r44 = getpgid(0xffffffffffffffff) r45 = getuid() fstat(0xffffffffffffff9c, &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r47 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004b40)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000004c40)=0xe8) lstat(&(0x7f0000004c80)='./file0\x00', &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r50 = getpgid(0xffffffffffffffff) stat(&(0x7f0000004d40)='./file0\x00', &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000004e80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r54 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000004ec0)=0x0) lstat(&(0x7f0000004f00)='./file0\x00', &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000004fc0)={0x0, 0x0, 0x0}, &(0x7f0000005000)=0xc) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000005040)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005080)={0x0, 0x0}, &(0x7f00000050c0)=0xc) r60 = getgid() r61 = syz_open_dev$sndtimer(&(0x7f0000005100)='/dev/snd/timer\x00', 0x0, 0x101000) r62 = openat$rtc(0xffffffffffffff9c, &(0x7f0000005140)='/dev/rtc0\x00', 0x12040, 0x0) r63 = syz_open_dev$rtc(&(0x7f0000005180)='/dev/rtc#\x00', 0x6, 0x80) r64 = socket$inet_sctp(0x2, 0x5, 0x84) r65 = syz_open_dev$vbi(&(0x7f00000051c0)='/dev/vbi#\x00', 0x2, 0x2) r66 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000005200)='/proc/capi/capi20\x00', 0x1, 0x0) r67 = eventfd(0x5) r68 = open$dir(&(0x7f00000052c0)='./file0\x00', 0x4b0082, 0x20) r69 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000005300)='syz1\x00', 0x200002, 0x0) r70 = socket$pptp(0x18, 0x1, 0x2) r71 = openat$full(0xffffffffffffff9c, &(0x7f0000006500)='/dev/full\x00', 0x400, 0x0) r72 = socket$bt_bnep(0x1f, 0x3, 0x4) r73 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000006540)='ns/user\x00') r74 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r75 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000006580)=0x0) r77 = getuid() r78 = getgid() r79 = getpgrp(0xffffffffffffffff) r80 = geteuid() getgroups(0x1, &(0x7f00000065c0)=[0x0]) r82 = openat$kvm(0xffffffffffffff9c, &(0x7f0000006600)='/dev/kvm\x00', 0x24403, 0x0) r83 = bpf$MAP_CREATE(0x0, &(0x7f0000006640)={0x13, 0x1f, 0x0, 0xc6f, 0x2, 0xffffffffffffffff, 0x6, [], 0x0, 0xffffffffffffffff, 0xb34, 0xd201}, 0x3c) r84 = accept4$tipc(0xffffffffffffffff, &(0x7f0000006680)=@name, &(0x7f00000066c0)=0x10, 0x80000) r85 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006740)={&(0x7f0000006700)='trusted\x00'}, 0x10) r86 = syz_open_dev$sndpcmp(&(0x7f0000006780)='/dev/snd/pcmC#D#p\x00', 0x587, 0x80) r87 = openat$audio(0xffffffffffffff9c, &(0x7f00000067c0)='/dev/audio\x00', 0x400080, 0x0) r88 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000006d40)='/dev/udmabuf\x00', 0x2) r89 = socket$inet6_udplite(0xa, 0x2, 0x88) r90 = socket$inet_smc(0x2b, 0x1, 0x0) r91 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r92 = socket$can_bcm(0x1d, 0x2, 0x2) r93 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000007c80)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r94 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000007cc0)='/dev/video35\x00', 0x2, 0x0) r95 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r96 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000007d40)={&(0x7f0000007d00)='./file0\x00', 0x0, 0x8}, 0x10) r97 = socket$nl_xfrm(0x10, 0x3, 0x6) r98 = accept4$unix(0xffffffffffffffff, &(0x7f00000080c0), &(0x7f0000008140)=0x6e, 0x80000) r99 = fanotify_init(0x2b, 0x48000) r100 = syz_open_dev$rtc(&(0x7f0000008180)='/dev/rtc#\x00', 0x0, 0xa01) r101 = socket$vsock_dgram(0x28, 0x2, 0x0) r102 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000081c0)='/dev/video2\x00', 0x2, 0x0) r103 = socket$inet6_sctp(0xa, 0x1, 0x84) r104 = syz_open_dev$sndmidi(&(0x7f0000008200)='/dev/snd/midiC#D#\x00', 0x5, 0x1) r105 = bpf$PROG_LOAD(0x5, &(0x7f0000008380)={0xe, 0xa, &(0x7f0000008240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, [@generic={0x3, 0x7f, 0x4, 0x4, 0x6a4aad5a}, @exit, @call={0x85, 0x0, 0x0, 0x57}, @exit, @alu={0x7, 0x7, 0xd, 0xb, 0x8, 0xfffffffffffffff4}, @ldst={0x1, 0x1, 0x1, 0x9, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, @generic={0x7fff, 0x89a4, 0x81, 0x3f, 0x6}]}, &(0x7f00000082c0)='syzkaller\x00', 0x66, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffff9c, 0x8, &(0x7f0000008300)={0x200, 0x3}, 0x8, 0x10, &(0x7f0000008340)={0x3, 0x5, 0x8, 0x7}, 0x10}, 0x70) r106 = syz_open_dev$mice(&(0x7f0000008400)='/dev/input/mice\x00', 0x0, 0x80800) r107 = openat$capi20(0xffffffffffffff9c, &(0x7f0000008440)='/dev/capi20\x00', 0x6401, 0x0) r108 = accept4$llc(0xffffffffffffffff, &(0x7f0000008480)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000084c0)=0x10, 0x80800) r109 = eventfd(0x4) r110 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000008500)='/dev/sequencer\x00', 0x14200, 0x0) r111 = syz_open_dev$loop(&(0x7f0000008540)='/dev/loop#\x00', 0x5, 0xc00) r112 = openat$zero(0xffffffffffffff9c, &(0x7f0000008580)='/dev/zero\x00', 0x800, 0x0) r113 = syz_open_dev$vcsn(&(0x7f00000085c0)='/dev/vcs#\x00', 0x3034, 0xc00) r114 = signalfd(0xffffffffffffff9c, &(0x7f0000008600)={0x7}, 0x8) r115 = openat$cuse(0xffffffffffffff9c, &(0x7f0000008640)='/dev/cuse\x00', 0x2, 0x0) r116 = syz_open_dev$dspn(&(0x7f0000008680)='/dev/dsp#\x00', 0x5, 0x10001) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000086c0)=0x0) fstat(0xffffffffffffffff, &(0x7f0000008700)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000008780)=0x0, &(0x7f00000087c0), &(0x7f0000008800)) r120 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r121 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000008840)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r122 = openat$vnet(0xffffffffffffff9c, &(0x7f0000008880)='/dev/vhost-net\x00', 0x2, 0x0) r123 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000088c0)='/proc/capi/capi20\x00', 0x40, 0x0) r124 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000008900)='/dev/rfkill\x00', 0x440000, 0x0) r125 = syz_open_dev$sndmidi(&(0x7f0000008940)='/dev/snd/midiC#D#\x00', 0x6, 0x20000) r126 = openat$vsock(0xffffffffffffff9c, &(0x7f0000008980)='/dev/vsock\x00', 0x200000, 0x0) r127 = open$dir(&(0x7f00000089c0)='./file0\x00', 0x410000, 0x20) r128 = syz_open_dev$media(&(0x7f0000008a00)='/dev/media#\x00', 0x8, 0x10040) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000008a40)=0x0) stat(&(0x7f0000008a80)='./file0\x00', &(0x7f0000008ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f000000a1c0)=[{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002280)=[{&(0x7f0000000140)="a0572837881db6fff31923771431e568ab73ff83a3b7e343df6844a8cdec4140ad44dfa27d276f70ceec1e013becf465575d1ec7a37005e115e1a9544052f68cd1fbdf58556cd5e3f0b1", 0x4a}, {&(0x7f00000001c0)="e5a2d6941352fa75984c70ea466e8257c14b3fc740a793a0dadc8aeedb3993d05a13265d6fa6798848642dd5aca2c2e5994b7df8c09b453f72e072e16b5088d5ec0b65dd89e64a9e65f711c0bc2484031983a6f366cdfaaaa78a3905ed766a83a0120654a6c09f8824686b84fa261ed988cc0a4bbc66544aad082fbf6e888ae7741be7e024aad44e8494d84ef70391f490e5db5298b7e3c3c320c44ba7360591630275c810ef3079dbd91243bfb6464539a0d726b628f92134e83f5bfe6ef21be430a85736074c6898e70fd827fd70d0497071f74a57ac2939f047c6d542acd410bf00f349196b5b745209fe72ce4794ac83741014b544709f40423a9bc760619be6142882821ab1f270065e2ec9d7d963deb260ece93bf7223447ab3bc0f5420ccfc2b84e4e92f00031feb594e26ef26dfafb7da81264b4140ecbd8cb3e9fb79b61c82030eac5e1b7fdba8b46cf3e07622c2c36f04b54f5c48b66feb18883d106aeccc4fb554e4343269ecf446ea5f39f4ca2cdb734008d861e0b2cbb7c4de189bd31bda7230e55f5ba3f91076592813164cf3f1b75d10b5a9c3d29f63868e2e7d09f5af1fc2abde544dbfb3c3f93c4f403e5bb52f96064074ae7ad7d50dd3472dcd82ee930405048ac4e3f6ed19ba551afec164481a03d34c642365f0887ba0fc59535debeaf915c6dae58af6224db284a54350c4579018f11044ab016a6b26483d7b4d9b7c104bde192d45e641fb943e5866c50ba0a3767f1641f81a6de09bfcb89265f6f8df2db6613afefe38de1834c7c0698f1ccba607000ebd3951d5ae6d351589b70b6d5b9f624ad82207ff2ad2733c4ff884031b69bed6bef55a024a938c03f88ebc1ec413575ac6c34e0441c46760d6b8ef52820cd147a09d73e0007c6aa127331bd48f1b4f4b7ce7e62e62d06b5f258ec628036679babe2903a7f8d97425925651337036b5cf94e7b3c81668ec30528eca7d1471e49c872a7c334d7fb588b7bf18185cc72cfe2d49b2a66007c2895943d7bed59786cbdc8f8b810c0398f10c118d025d20d153a3af1fd189fea172eedc18173b221b8568fb4f387de9e1364253cbf55dba155c301f65ce0533ba98dddd2d9f6ecfd3d9143517f03eaeb3dbc749d22a21f77c98b1cf177277930c2d37d0b98c6e2222de9f29cb79ea18440c620044c400c6a6f73ba1a2acadd5ae4660edfe05616fc30bf74e3821ad8c250b646193932a2bcf91b35c62e04035c98ac29c3e3e42089e0b06d6276ec14defec45bfe7ff65a1f82a85d77c9acfa03435224d8e5d157bd8dbff66e35fe48f626e5dc1ecd197df0f2e27b21979cacb9cd33a4795ad8c2696a0e82d14c43303252bf5a772feaf7e6ee8e36179b62817ac810c07b7f08a4d89f8a5e217db323323acfb8a39370a7990974225a7aea749078aa8593242bc10f360c73a2d3e4e83f44092b177e67b78e1df4952379e88ac359655e85a0c69fc34fd214de2bcebc2b6992be1d2321a23b3dab62dff6d1b2d601823d15db576961ae2994a4ac86ec0f66a1922d9df533907bdc4b1778e0e8f5ba4c0c9906db5210b41f8961cd8e4db40fbd1dcfe49e38a9d08f23949dc5005e2ea1705150a12306dc7bc213cfedcf8c82f81cb6b6be4a3439d094fb44fa3891e497b628b8df675a0b563d7bd1b0804c5cdec2dbae9fc77b6b0fe07561e3267cba266e1c5083b46a5ce2371b4641d56cf9551f66669c0d3816d64262166889a63fbd4d50a050b80b61f7667517a3282b8c3b417dc471bc988f6d08c108abbad92592bb1a23c9d84344ec045cda0881b7e99d1098ca27961e088587b0233972ac456df5d2e9c68501578f9c595751e3e34ed457df0a6d396ea5236e3e452b4ae4c0fed03a0b7c990ef805a41befb70a42e6c29b0e3aad647e9ce81a91bd4c70043d546214a05016ebe60b913f9e567efb5adf88ccefe17da7d4b516e64120c9f742ed8ff7c5d19c753a14e0a39887b03e1ba33e93f36f18ed92f86d393b481e9260ff04b57c98e1771e2b6d4b99e57e7957049b0368c44ad6cec6716745af0b64b26abea332c49bf83ae0f3629039a57732013fa84ff240ae8691a8661f499d6e192318024a8725eee98339b94e2b47886b9bbccd46fa6f3bb4be6e302212a66c7db114274e1b2f495886dc3ec050a1e0bf01b18934a1b9cb25bf0d9cf986c14eeb8e176b718d90012c8b56d4f4546cc56ba0e425bce1ad73908ea638bbd9ccacf30e50d6e8ae46d8f90445ecf1685e84b478a163aab215a3831a601f05644782ed6c56bf39fcbc9b8b0f8bee76a58cb50e686ce17b57df33e07c2e0b28291ad760b86529928ea4cc7ae89442b4fe4b3389010ab219680cda219df3d6744a5eb2c059b81aea5dd1c617269d19bf27578533f22ca2abb0295c546a43e52b82db38c6649ea1dfbbd5fef658273ef693641b22d039a2426a6e6c875e7490279098d418a352904972f81c2948a57854efd51f6636d9cec094bc5fbe7d7f7db387bc2c1f21c374adad557a91f23a40e1a25e024a408dc2c616979a5938fc3d21e6cd5c072d1e010de90c16ad5ddb53ddcef3bba30af47d077ec6a7d86fed6d3d7efaac83b9f0847575ed0f6af603bedbe40459e7348b1548a447d64602c54e97ab4283177093c42c83f55a8f87773b27871c3120fd0521e7d01ac52012c0af28e952d122043a55a8015936c37dd6865c0b0c68acb8987097ccfd4af0e926d96effe30c315a3b152fb37704dfc5b8e38e7e8d45755b67f2c74fdc6eaf32b85a66302c95d99606cdf2c19b1067e5aae13caa7e36184f308e835c63a9b40d3e685ec08aa608b1c7ff73dfe0a88168020c18d8ceb4785736460061608b159682e0c17381351f6beb5667a10cda8a2bc9196332011431bb252c39f7832340025a7fefec07116c08e4bf87620fd27a4d9b8c76c75dff5d47d56df34d9793a755c3fb9c7b3d0cdfbc0c3f052d6caf2b11283c98840665483f87377fe5b0a1ced92726d08150820bfb5cda3177ee9f5c2240869f398c0185c9f9c766e64e1b199d2471c1e9d507c0376876ae77d1465077e6b40394aebd710729f7375574e9c469b5925f29b8ff77fd8e801fdda5f74e36d61842cc849785d2bee6c84556fa1f40e4bd47d5017ab1cb1ba1ef84ea677e3a202f00f2e53afd45778125d1f57c8d96f0d20b5681dfef7d79c31c2729dd91494ff267aaf314a81364e06780b90146743f7657768a8f0d307120a3d22877b2b3b0420719f8b4274c0d960691fe6045ce11f59b3f6bc778cf5c04e80ef67a7b68415012530829e1a6ab262af5cf9630eeddc31d0f9c76a2b0d71fe0ec69c1dc4dce18ea729ba442b88bccd4c28c2b2daa8edbc455b026870cb435e4d45f4294081908c92e839bc298be23f1c81148d7595f626c6c95932ea4ca06b072fcfb78f4f1013fb4a47911b5b56ff4751fa9b63ee52332fe413177628c9f6d2465dfe0c727907663829f340312d62566b3ebf914846dc384509b071897ea69be9fe681977b0c4463072178b6ec027109490b793ee9481852c3083e389b1f837e08b8f9631c4dde18be2e9788ee108f1a7119c7b823bdf14ab7246ee4299493de8599c7fe58cdf5e4bcffeb752339707f40d8aa6b0d167234aed24b2e19ff58a2a16546efaf4d9f19758316a95ddf604bb7ab87b9d1a0109dfa10dba9a61f050b9e50ff33fbf69becc314cdd8f6d88141777f575e2d8f8b6ca8ba0f2e0ff26ee09c1756f6c3f20dc569e2e1ac38ed2c68f7a045ee8809f5d03ff0a4a6584585009a8b9573e5d62ac96bf3da0412bd544805a4513cef8e7d7dc184351df4bb9d61254abade7a7da839638970fe990b841dc633b907eef811c7e68d9b91dd434d1405100e399a23a75086d56500e0fdd1b8d9b984a5083df51a6bc758e02d9b7a4350998360f3ecddc7103510682fd375f767cc22aef57b769618352b26090dee3511c04f9dd0658a75e13df72ccaf1d9ead9a4d9acbc9fa3f65f6dca061612bd5be6bf12ca9a0e08586eac18c2b03ed14e1e2efb37c1bba321f865018f6c7a07892949f4d6ac384b04b1a323408a0e9fbe0ce4c43ea9536d267cd1453ff999aaa9b82a3207a035a88421cf071cc515836c41e2e568ec5f31798de2b13eb021fc23e27309873f9b5dfdfa219750cd833a5497cb7a733603e6c6400ea3b223f2aabe09e2f11f54da001821043cc0eac87d298c52f549ba3fd25960eb9524337edfe4605b3cd310b7269563a82659b4cf0c5f5cdd696e9c068f3ce4b47a2f079070ceb452ae75a748f29a937c7c0e50211099ec06d7688426ea1ef888979c089cf7dbd747944a3f6cdff8364d383dfc2f73a2200bd4d30b94eada11e8568e1734b079d15a3b55b80103aa18d724b709871c076660fdfc13b361cc60ade4b4e233bdd907189218849fd3624f90edefa0fc9579a2f00117949d82032920874dd51ded2457d4e31d0c9f372925674669796919eb826295401e136956566cfe211c1eb825d288d195b58b78a7fca48c0f1e116cb3ce6a2dda275038570ed6ca3d6fd28ed9a596fe7669d2f0aadb0de7998aa433213d60401fafdf46a8d330324bb359a91940e349b93cc8043c3b4298ce1260e6d785a649c4dc05876686074f7e9e3acfa7ebf1514f44c6d0fb30bfb98ced5bd87673058e9e0325c5b41ec99a71c9ed8235e4a7e552e62c5f4ea7698731a78dbabe0f904f82425034c586d1de16814a4379b22f456ef6b2e470b076e9368be9ec893255004393ad1b6f7271b7515283cb6ca0eac1f1e9f17a720171151487582b24a629c68793fa35ec987ab6f7fc8e31a739f28dd17d1e136340204d513eae08c6c831819fbcaf969797f06e5c7c36c400aa942d2f4e266bd7026e2eae5fed6cd654cebf925059ad710dfd34f88a259a95fdc340d9127354eafb3117554b0e919bbd6ad5a8c9d6f86c7b204de133354eec4b6f68e15457636778da4cf86136c6eafb264b35186d41921fed8049ef0e84c94b8e2d8860390282881d581d02d98f6772666487522b8c100ad471dd7f9719e2586525e378033de6b85a8a853946170f88d9f19f91b985bf3a3d8ebbaf87711b194b635f3969e6976eac2b93e68eaa9f561b9de17586efc8252aa5f0c7fcb8a0dce0caa88c8547afebef7f0873621db87378534517d40f73fa990d1db17f33026c3a7305f473f36b39d1b8b326703152b20ec6986567f8244c96ae6486ee28d921048739a0c05aae6ebca777e4983e2b60a89041e3b0f2cc85e72211e11cc773eee6e6443224bbfc01fbedd4f5209f3d85fedbd47695767d0a827fec733832e96fa187e14701001dd3c18ac74a4c20d04fe1af86f4bdaebad376fb6816195c9973cdbb00c191153d36abfc9e5a5bc25333786955d898911159535bc7f090b234fe71dcce5943d5681ef16dfc82b2b957439984d5c3bfac1116eba63ddee26057f2d1932d6796f5c001d30ba01b965ff7c163104064c1cf6d9fbe2bcacdb5359591a76be2a846811f87deb6934ca0722ba66a7fcdcd51396578866048f6f698025f58cb39717623b7dc81cab5aa6c3d4293bbbdb6562839793d17e83afe69e9e381f87dbd4a4ad8a99b36cd3a4e73785a2e21481ae7bc2fcc1f260dfafbaf05df1522997a325e23f43d9afbaa690c416e9db56e7a3f68105377b7f2ea6326c7d93013d058f38af9b69d57d4bd9b7bfefb1bf1404390dd98970e421e06fd0f4cca657d11fead5f95b12902255b5682f0b067325f0c596e02223b6aa487c4f5f0bf1674517bc82d828c", 0x1000}, {&(0x7f00000011c0)="a7d5822b709ed31aa5a552af50896cd2a031d19f05c6ab7ad82c272725ec63e30874a5cd5c7e3d07ab9ba82815ae821cfaafa05faa86efec70796743588bf7db2da45d1da8fbf62fbe0d35568cf3f9bc352a6682ca91cc4df7d10b37f2c0020b998f0d0520db51f75df2f7365df56b3c7a3c1c87578ef71bf61f3dbfa82669abcec8a80940ff1fd9f2433a12fdd3412795360614543bf9cad49f2f6b1bbc9f2f815c196778586867", 0xa8}, {&(0x7f0000001280)="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", 0x1000}], 0x4, &(0x7f0000002c40)=[@rights={0x30, 0x1, 0x1, [r3, r4, r5, r6, r7, r8, r9, r10]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x20, 0x1, 0x1, [r23, r24, r25]}], 0xd0, 0x8000}, {&(0x7f0000002d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002dc0)="378cf589555e3bcb24773e07b4da11d285b406403845ef3615310bf34ee8f01887ca606bcaa47ec3ea5806a9095e9c13cdf2d6ce860c35a895c961cef1cb0a43e1aef67dd1bb8cf4c075057a437d272229aaea3f64e3b95cde03eab38d05e73fe22dfefea389ba8ed67e9d4419aa2a4ad01be081cc1cbb704a8eda76125edc26b666c6f961f525c5f098d377628e58ec87d8dce15db086d7ae829936a6dd04aa20d72064f58045a2b3d0efa3ad330d194a5104f6985c1514ffc799306ec5a9e2e71e1c6ee303c2c9c31bd8ab68d6e3cfb67822318d33b76f67fcc3", 0xdb}, {&(0x7f0000002ec0)="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", 0x1000}, {&(0x7f0000003ec0)="aa16e1979c8c8d56327028c33fc7f5f3f355584b1558226eb2a0c56ccacac99e74544575392d70dc78c0c3850cb12af7cfce4145d04272446d3b600b10f10dd1977278f387257c95d8934a8fa487566d1d9d7978168a3b295d75c190d595", 0x5e}, {&(0x7f0000003f40)="6cc742b18f451b1a0dc8553e0fab9ede9249c679e18cc23f8c00dbc5171d5a05c8f2b3a707dce5a30f54ef3d1d4c68ca5daccb3bb77e3d4c2cfc66c01bd0291308eeb131709dbcb788dd9c226d877f57539690161425d23fe8592020a99e2f1f1eae070623507e65036afc8581019917b7210a901f5f4214eb565a11d406c808ed9aa554231583e4e63ee132062729cf5eb8718101abda1b05b8b918ead3e88dd9b346b5c69cdca38b573d68cc357432b78c903e1a433ce4f81fb7744c7587d3c8c0082f750120ad4f71af23", 0xcc}, {&(0x7f0000004040)="0688c5dbeb462eb68bdab9beff11624512adb91c8822d9e2433c3b1818988756b3809f8748bf61173edc233f829209600cb9c6186919c5e7b0682da009f7ec9d9b5cf21aeea93a0629820c510e43f713cfa49712a5dd50", 0x57}], 0x5, &(0x7f0000004780)=[@rights={0x28, 0x1, 0x1, [r26, r27, r28, r29, r30, r31]}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @rights={0x20, 0x1, 0x1, [r35, r36, r37]}, @rights={0x28, 0x1, 0x1, [r38, r39, r40, r41, r42]}, @rights={0x18, 0x1, 0x1, [r43]}, @cred={0x20, 0x1, 0x2, r44, r45, r46}], 0xc8, 0x10}, {&(0x7f0000004880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004900), 0x0, 0x0, 0x0, 0x20000000}, {&(0x7f0000004940)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004b00)=[{&(0x7f00000049c0)="cf3d9a42640b", 0x6}, {&(0x7f0000004a00)="e47403f27636b5bcb1418d7ab1eb96bfa800ad9f7f0c68bdaccb5b144e8149c0eb21daeb7076b98f2a0077f1e02e86cc1942baf7c4b9fd8b1c652fbb30a55fd3090a874ab378db9ea15c690f902bc54212f51fc02c4adfb5117cb54100136297043c95f41b64d8f8f3e059c9aacb6e37f682357c3acbb207944623d61aa096861800f51fa361ca17da228e4ef276cba2ebf69ce77a3117c5a9bd6a81cbfbf497b6817dc03448f18b8efbce5adac1f9dca622c421a93b57b4807dfc9a8d9f5ca2819a", 0xc2}], 0x2, &(0x7f0000005340)=[@cred={0x20, 0x1, 0x2, r47, r48, r49}, @cred={0x20, 0x1, 0x2, r50, r51, r52}, @rights={0x18, 0x1, 0x1, [r53, r54]}, @cred={0x20, 0x1, 0x2, r55, r56, r57}, @cred={0x20, 0x1, 0x2, r58, r59, r60}, @rights={0x18, 0x1, 0x1, [r61]}, @rights={0x38, 0x1, 0x1, [r62, r63, r64, r65, r66, r67, r68, r69, r70]}], 0xe8, 0xc800}, {&(0x7f0000005440)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000064c0)=[{&(0x7f00000054c0)="7212148d8567254d62f313fc0a29aec615afa4830182df769dbf8cafe4c28ee27742cb5683e6b07d0decc865c2c94a2b94ed5323ec6e06ce5bef4dee49d9cee6c91f1111e1077c52820d3c110d1b01fa473984a79b728cadb27f37e3373c2b4097a56a386f257e5115f437a8b61c73a255eeff2c4374dd8c318fbe6f835410650c0afa8523522125f394601a1027155109141918929a33b90bc60c3b90ce9fff6336138d4f372ee0745873650a8da0e222aa0dffe9e9ea670e58ae3dc8519060d0ff485e2d173f95e8bfcf15ca1fe5bebc0c5a06b92279eacbb264db6d83b99a1b6433384276c8b1ca18913a8609e47c4bd27b301a90a2fedbc8aa38153682dfc0e905137912b747279ed0c491696bb8b4126fb60e20ea7c60b996b771c79d011f8615a5f05fb0cb9ba64607fb2e0112c6f7fbb9337cd03d8a0d45afc908f64096ab23d73fe3536e1f3be7a844222da8b2d6d8610b8d7067095d346021adec9fb251b4cc438d735b1ebb5868514fbb17398333c27f5538e6ad29ccd60073b04fcdc08db5d3ecdc4c9bcde279e90582fcf7a0030b171c58b55b3564e0d9a763965feecb17a14dd67c3b314b08d956b459d2dcfd375d02ce16af5f62c37d98940d978e0260028aaa036ceeb002d63c7e6cd4890a59c65b461af777b391fb61f754770095e9b22879c71c67a1d5105c56c5e866a1764762bed6457911a225272b7b28b3b728858e8495d4209d1b6fab5cb6b8e71f9b1d92bfaa6336d4a985790ad77c34b3903ad9483b16234cf7e3bdf08b69b5de95d1baaf984610839280f6aed898605c0ade712450f7389381634dee1e4dcd7f13ca6462b6e72f4cd2176248a0bbc7635dc830dbd25a1d5a3e89d074014e57d5b54e2304101aab6a3c2adf31325a05dab6a930d245d3758e8f9f4b9f443c20e37923d9bb373be8bc2c52b7eb4c1c08b1e412936edbc3974772fbdba1aacfe496678a2dfa88fb7214834405974bff3d146d5ddc54e40be70718e0f03beafb97bb46d4df16db932a5d3357e6a18a76cf0f2eace88139ae5791c4b810b2006891192883e6e1848d29a332a3b05bb9fbfbf3f0ae7642332fb8de1c2fc50a4e2636b2a1116ff592ed825e666dff0c2cb601464db35c27a769334c9fc86a37c6e3d73b6db2b3c413ee7bfeb97b9c580bef9ded200c996c7ab1d84a0a9c6572f9ab1390779b806fff18a170a9b8e52dae0752e1f82681ab8a54b8f3dd3c831bfcb32b7d727db3ad3b8cf0d5cc0527d1938864fcc615ffee9fb661b2656a2cf1f82a55be0e33796e5d5319255798958c35f060f8225d7647da732391004e80609d23f469bc7283fa7839f7f76920e77a54fc84b0d9f5fd89184454db66d2001dd1cf330094c295c3010dd8bd088c903f08aa894c8e32b12cb2a975a34638d9e3982b79db264b049ddd6f12386b6b1ba711ef34a8ba7559621cb6d9317d8858092e96f93351f27c8cf292927c5cb4c4d2a2dc2896b42bbb7261809e8535a3eb6be0b6c05a0da8f9761f1e1cc44700c0beafc779c0ee952c7ae07b8f510f15d162407190133482cb70b1f3c27a7032c8e19bac633b16051f154320b6bde054149ce69627eefe8be52b0fc029617956465a983166bcb84cc5efc45ed8e7b88af6b23b4966f9ce80c59735b03af3325c18058a5886609c7f57c96595e79a88a586b3d9036f73c286c02d2f0abff6a96397211c64875131ed4d5655969336813994e9c9abd13afffcf90ea4c3ae900546033377d6a9e9a9c494db96769c675d542bd47c288d036f68eee8689a65a1f6fe2426ffa1dd5eeebabae06174b68534460dc677f5859b33e76fe25e8fca5c768220a4096baa66912d466098da9aab5c4cefaece39976e6b944297058cded2dc1b4576e2b0c5ef06f52a332577b0e17c58b3c02740e0a144d477b1080a1ec1f5bf718b5d3c6481c1aac5fe9f69d2deaa353d1607d15f044d85fab203c67e1c2adf604152e7dd74a15bb38d95420cc929e48e0d3e6f6cd46f6c10d9dd3f5d916355e201a2d836870668ec3f480dfa459098ce12b09de9fdfc1cef57e2060690526dd235bb2ce5689a44324a82e7fd9d322c7e94d448e2f9cfe59b89e2456c5f3ba80b28722da8974fffeb99c5057514fa3238fc5dcd95b81d2232f22eaf9cf4fff2e061c4dc20af61e6b0c85b8b2c65ef775fc149f40a99d171b53219586c1fa51bc061c2fba65f9030708826b26a302e769ff2733c6b3e2926f0486e7097a337ed8cf759588526a11cc0f4407a30240ab6ffdea15c8bec3a0b9307a238af1b4c9800c4af5be99b169d379367e23b9c4a4dc99f21576fb6743e37b89131e62e936e08dff32f68132f09f85c33a24bb3bf154b41f71341ea1d9bd1d2acb20654c9e9a33dd5b7305a699be6f1546d906da734b7227333ec6a09d1d89d320b886a7758796abf14d9ff021c32337798c4e6e4660ab8cbe31ae4f37f70410aab4977f4798716c53b049a4694d45fe7bb2d24e9325b4671d927771715972049fff8a8701337c254e42d313775ec97871549249986a6ba653450e3362113dfd31b82d5c886987b26d0453c871ec80ac9ac8eee583a058a0d9336a65b8a3f144bd442707632aa17c81d261403be0286be0bd7f4f763c20820e65bf58e8f05298fa51c27232fdcff7f7eba79a6f4ebf47c58bde4625a5e77ba35f71c8286809522313eb21e6bf1d20accbd00e3bb9fcf922bdc437b831dd6198a9ed3a871a0fde8117427cf058c2ef1bd0248e048cef7495c9383ad7caaca7db659742fe04ceffc732f852c18c0155ed8b5ad15cfcf780705ea32a0b46f803b1e182784fdce36f9f6b5eec645a85ca0a957bb3fa60d05831775735b8286c685310f7306566db29f454d907acc34fe1fa7602ddf0454df2d444488413f25e7603de1294e27cdce9e8da69c926cbb62e74a9cea27696b95c7d0b9b402471a6cc409ca142122a7aa50350cca97636378b7b62b86a647240419c1e93da2af2e07e45dd5443736b030365affd7e7d8c587e54196bcdc3e5860b4bb0b0c9e82f126f389188beb5c27054ce97862ff23bb21736194884cf30ea6488d626d28be5d650f750ae727d3030d3f2ace1430077b772f9eb03fef6966e17818367fdecfe32d8a7da93d537350712ff978e01bad415a26665170126674b3d1370f7ad3f6b7e16cce8e29ec4c8760aaee347da1a89462b0a33248307d5902d844aa750412879f6fe19375571179b9b88a6c3f5cfec05b7db68c780fed48c21f30b2f4c532eea7310b126affb8a286ebb6aebce1baa9e5fc393de446815a446762748b039c258745012f906a97aa76411047ad2d8a5de0a8c8a410a9f6828f667d5af6fcf2aad451de2d429b3d676d04126a5951d97183eb118f0db923cd3746807f995d8e932abb3624cddeef1e2b7c3691d39236fe17f639c5a0aab366f1b1dbd8d09d05adc8b4aa08f0138c085a7b8bfdd9a0d3d52582358a0ea5295ac219171ec677f20f9b5e8b943fcff492f587944059aebace62ac44f750313f68cdc9ecdddb3a7a24fc8f1d83d4f792fc97e510e92de5c4c9c1ad2acf71e58b1c198c8731af00bf7faded4e76dabad17a42134c6c7a7a9040795d722974bd2508c3164c0e19bc07c83d12d72abb595cdd44354eb6df0d85474d7fe7b92739cf30aa8cd5e94f71503ae4031460c2e114b7533b1c513ad0abf9c5309dbd6e37789d2e8eb684a330b450e311b73cab6717a822d5b30ed5c230f1ca7cb10c0c47ef1d95b1499bab9877c1d1c1cd3bde3486f16cc5ec1c110619f17a7557214c364985e5fc35eb941bada3c221c14de7c3525eb626bea56f34007d657fe030ae383790221b64c9a088cfdbb9835879c144555a901d18ee069f3c79f5ddf547707d275547b092a0dedb9fe0c2ebc4d0e3ac5944b5b7414fddfef69b985e24a6d0c805384524477d12ec4229d837b811f645e8985c435b9b61b67c36ae4c9e8e664420b2f35b4acc4a495dbecaf707af7de70e9637bd8f2c29c7fd62efa463473c21ce10ae7c44c889d5c467b41b0e10a574c030da98c0538af705b3ea88365d913f3b169098e591564d584b68a7c412147fb03255b9faf6e1a1f010ce999e304c99afd9c85387a8d307b1d823d68f1b0bc5e976084c60057c65415cbd0bfeb2815f8ecb58cf397820ae2ba0367ba4e88ce4e1c0c7f644e3191e788e4b8bc5d1f7dd46e2c53481b5a262dfd4ce44ac22ccec9fa4943485bd1a79fa52c7cb126533e4128da1119cb24c953267352b02c226609b53d27e42663315dab7d7fbb0657b96134af6908f12ece3acbf50426715b95cd05fb4d022211ee5c168ac0ec1c7b61fa0aab27362221354c6189539e0dd5e5bd6153a889ba37a0518bf6a0fee57e1bc4fdb60239a6a67a4ecfaf20d27383ece1e65f5be6672ae4e9f8615deea80f63091dabc61c970544a77b3a039ff111762ba7d2add04600be78dd1a8dbd138d03a887348a1c714b2e86a2e22a6c45989a876f40f170966b5594fff580a90b755dbf59303de35b077cda02660d26cc1939617e10675207448cba7f1d0d339131f0481104e7e7ae714cd6f5ca003c770380e8568b778425677d353a9518050b96abc093556ddd03056913bcb139407f19abad67e528e2daeb86586addd8d4c4ef96fe6814f0769d681e1b99dd898499728cdf5c971b436ff47ec61113e3073154df0ecf27b1899c2a9edc17bec0588830b0c7a31c7ca6269c150cebbf58a81505a85b01ec6cc28797f1ae6dbaa2fdfd1043a010492a27378695d3f845816b3f7004407638a3d3c785ff17878becef0e1c5dec9ed1e18fd2b27d08126ff3ec865553715add874a94faa68a558c8af8a4e1fded1bf30d8cef1dbaf4a59d386ed007b58b8257054df933c7ac1031b661a362c150bd02cc332c0a87d808baf9630fd00cfada879ec0676c2a116109894e64e93cf36d7c949745b8805dd3df63e331309e8e84ebc3e21165d29ab7680e19c5c7e53321281b7e34d9698eef9d71246885028862f4d8c064d5ce405bd298275d832da2fad7793eb82f4fa6f05289d6a40756eb0bafef26ad96126c13055ea533f02ed95812701d6b43ca3408846ff6bbc681d991b42647caefef4b703e6f74ca7b1f6d8829c08325c8e59d1bed65b945a681785f79522b55f5c151d90c7bf2c6c53d1a4bb33ac5e5a5e215a25868095a70066897b60803a1080ede81660df1b26c02c4d4f3573182455c3281067b7076c0b6fba32e3cb433595c7aa3c66fbbe2ccf99bdade3d6c78ee2db01d6e206e61166bdf0c832f633860a1f3020c4aea84760bb4cd8857e4d115d5073bfeb69ccb7881b437f79905d2644f334ffe3ba97bdbb7fdcf765c6a5d770ac2803811098f13774e735f1b6675b1a36bf4ecb43d4da1f680a8da46e014f1904d5d591629594ddb4eb7e2cf27bff5063560f08ef0ea24ffbd767334049e2acb5d013b0a6a4bdfb0b22ec5ff7312c45776f541c4ef005763e9ceca97012351385a19590334546179777288a06deb43e47f7a9561ff3bd285ee1f6accb21fc4cbd275bc03ad5795d40c31fd4cd6f0848209c462a0f03a1b37a975146c2eafc604ea9dda0e23076ac714a131b5eec973e3c9ed23f47890ca60c744dd45644ac93d54c035319f2bf71d7fd48eb204f267f5b53bfa5d3e7acef30aa0ee030225b578b452f5f8d14fe7f7568244c2fcef77a03a83c6f75b7ec9659db7458488239d68e4c0786d1ba121574a54d4b455ae15131b0436a9c46c407424513f9237610d89bc16ee5fc", 0x1000}], 0x1, &(0x7f0000006800)=[@rights={0x28, 0x1, 0x1, [r71, r72, r73, r74, r75]}, @cred={0x20, 0x1, 0x2, r76, r77, r78}, @cred={0x20, 0x1, 0x2, r79, r80, r81}, @rights={0x20, 0x1, 0x1, [r82, r83, r84, r85]}, @rights={0x18, 0x1, 0x1, [r86, r87]}], 0xa0, 0x1}, {&(0x7f00000068c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006d00)=[{&(0x7f0000006940)="a21310f376e1c35c508bbf409b7d170181cbb30244fe8aacd322882412d33cbd5308934950adad81f70a780a2da9812f08bc861c8d43a090f6a49503c7bc431463efffd7362f3944a893054524c791f7392d8507e5f8bf98682eae594c2cc754345cad608d3e3a97f8630f5b0c9e5ffe84823c8a3b3ef6a9398912597bfed773eeefd32dad9be82d0cc571e13775d83704bd550f5663af6303404b2032f85138f4209d23ead175e389df22e252d7c7241bdcc531369b41aa5c39", 0xba}, {&(0x7f0000006a00)="f8856f93ade2c31b33a178e4ad7eedfa02f8c3e8ba51942192cb500523afd59086025de90c264e98f9e487543567fe6451c4cee420abe943dc2e63aacbf3cd7a17a1f0f11d42883ff05f4775e0e1fc85fc9260587553587d8288cfd09d6016844711ec4d841ecdf5047061a91b0da9743952971013ad6630fd9cde2c06eba82c88000d75371b13318cc316f81bf1c5d1be3746bd9f5f758e23c593201cec4dc75e9e204440b356c1f70e333db57af3b42d7ef80477c649a751467ddc0c5d32d11c76fac0f26839ca", 0xc8}, {&(0x7f0000006b00)="b9be03bd3e3fef08875c594bded6fffdb9c08d122e3b7a06d8510b90126eeee7ac97e7a078da04aa644415ea260de3a3022d8465271a9cfb956143290877ca3e1846b3ef0838119eb15ec5e9cf9354e9bed369f476cdb0a610080112f48abea369e50cc67a12aa104a66523ac7705fd7493f56117f11fd4c77c86641b4af9c7bf98481b63f6308b94281f23012205de43b5cfc30b600eea35acda327fa6fa6b5d2da0ceacc250ac15161479e543b9486f4da10562523802c18eb52e9e01910168a37", 0xc2}, {&(0x7f0000006c00)="ced140af1b4696c606b690dc96b35619f578da5ace93d557527f161fdf5d87cbde5f1febf843f8554ca3e155c6da8dc6f0ebd10197c117f654d33e8854178adc534b7eb7460ff57c6ba0df674fc1ca7a815452f88733907b181aa790be06b1dac033b3345d58f089d20757165bf133cc3f2e380611a5a22960a4dc07118890048619217dd1eb7e67ff2104c82b9f2eeee0ab008d858c7284b8c060ae2fb4a16a4f04b56365175876a4eec2e4b5053fbecc4a9e31e8893c0c3d54e9b76c22a9e9473518293cfa9cddf659f8b539ce49afc4d29b6725450d63b3994191ba4af632afc3d75dab61c5ba", 0xe8}], 0x4, &(0x7f0000007480)=[@rights={0x28, 0x1, 0x1, [r88, r89, r90, r91, r92]}], 0x28}, {&(0x7f00000074c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000007bc0)=[{&(0x7f0000007540)="aefef2159332ff4473fd4313dd60c1b6d2594181408299fb59149389b2c811f257fdc2b440ac3bc47d0ccd1078e177f4e7b41ae79705440c904ea5614b3833afcd5b4df46fde81e865445aac7a81d913e50bb68e51c1dbc2cce9de6edde8335ce7d16a4884b579213c42e3dce555dd076ef629c6658b9a5acb557d19c276afe346d3af49efe157173bd149c48642ca7a6c650314a834723f6828d781c06284f92d0e14a1b89d5715fbafc0c3e356d4df5ebe565078692991e5482aaf1cdfcd5920b27751f7100d29126c5886a536692eb30588456289753e62344374264401445022b5a6", 0xe4}, {&(0x7f0000007640)="896ced4939424fb09ef3d52180ff95f42bc16ac207d99e1c0deba91974914ba1270dba95714746a1e73797de0b25a9bd37db7ae612e41d0fdcfd68204838d05e2fafaf2e89018c22e0852d54143457cb1b2104d8ac6f98cc6f37e009668b795b0ae71d15964c1c39ca71e552a1c8ae66d6fff020adf8f9381f23db88222f30292a84966360c230e1bb", 0x89}, {&(0x7f0000007700)="83632c463827ed1ca40f998a3a605f80fbcdbca1f64cff22bd48fa7dc189e9fc10eecbe9689fcbd6cfdda7bf9c65ebcd0235acfc9ddf9717b72dc1f00a859f93cc61184c87c99c1910c899ba", 0x4c}, {&(0x7f0000007780)="34fb3e3b4ede972507f7faba10b5e35cbeb4a6e0c7794bbb569fbbbe5fa52850e37e9f5a3fae0cace30846c2ac27895e866940269c43d36220f8fd19ac5c00b98fe740ab6e76db5edc9289cd6c94bdcb4052377b07fc0083627e63ac9365bbcd5ded87df8b3b3ceb9870d1a77b027f83f0469565411bc2e802dadfd2dbcf0695863536840b4b1103d4b5771c3cd73570ddce13d875bf7a35e32f1f4801e8c863fae5d4c8f3dad34303fd0eb9b00a79645dc8a4c92c82", 0xb6}, {&(0x7f0000007840)="1528d42238b8522b8d2f9ff0c345f5fd9585878d71ef7b46180112c93244f1", 0x1f}, {&(0x7f0000007880)="7baa4a1cd6dd6cef6fb44eadfa785150b6baa5a71c7a1ec4106fc886bd05f5a0611ed7dbf0e81781db3a88c9ad79ff65a5a12930207d9986d9951a34143ec96daa9e578893a6ae96fdf7024a957fdce28538cb0b2b648bb3119aa7d7e32ea46acbbcd9369eff3e06973b97f29426034fd1f90a1a56090850693c53bf060df87157268d46341d376244a41969580908b4cdda466a4313bf77fc1dee707f60beb4d3ebcc253429d5501feeae090b2144298f71cfa5281585ca2ab0ccb6d40aae54942a27804fe46f19b500837910a72a75c02f3880a76e1f8f92ffce54b955e81b1e96ad7399ac969903f9db326ea121a14ab4a7660d67", 0xf6}, {&(0x7f0000007980)="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", 0xfb}, {&(0x7f0000007a80)="fbda1fbbc4344880f47d1abb3dec429de4f046cb159cd319896a292c352fc7f5ab071c97e53389a7f58b170f7f2a544c6d0e3019f742cbb62bfb935043def7e4727b", 0x42}, {&(0x7f0000007b00)="7f00469c48bad5007bb6a3eb", 0xc}, {&(0x7f0000007b40)="56747cd6102661cf7dcec91e5e1e5a14d37ac5c8026f3587fe1ef293042ecd13924772b5143e47c9ba30f7f2aba779363743e33bbd8432b13361e2ec3d91dbe8b2ad0b0a943e323c103fe8d821d9b97de8b7906bb252da959d90", 0x5a}], 0xa, &(0x7f0000007d80)=[@rights={0x20, 0x1, 0x1, [r93, r94, r95, r96]}], 0x20, 0x800}, {&(0x7f0000007dc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008080)=[{&(0x7f0000007e40)="388bd8eba24e6f1b11f904608f3a1a5910e443d8b250902e1a9d0bf31c083ebb1aabdefa7b62454a5a383061e98928c7e679720f654dbfe353710cc795bdfda0204a27adb392aa7b1a9fe1abab8a95a78c5efe6725c497b6ee4ae3de6cdc84d24d2ae7d4c1a907e9ef7490e76c57a2e9ada0a29150f020e267db9b9fa5475378f8e1aa2807ecb4c85fa15a7b7bceaa6d5b274f", 0x93}, {&(0x7f0000007f00)="65f676c30de94ae30ce13ab9bd3eea1cc7f8f9da46e0e69bd920550b09bdd93281daa7ae26b452f351cf0436a3fa7440baee2c8b3e00f0bbd3d5ba3e54551d7a1a1a42262efe27a7fb29eab21e7c6d9c96565d951126732e9c71a9245f4d477fb3fb7e8c41f7203cb861fb26ca5dfd47a25419db80ff0840052791413f5bf7ac387404d4122d1e7f0fd951", 0x8b}, {&(0x7f0000007fc0)="4ab5e7def1ccb8c19e46a39343c12c3ff5f18df1e8c4341dc4ab9a52cc05d847fbd6d6f4f3a9a1456821e89006b4c6e8d59a856c1d3689025cab9171369736078c10ca754be448feaca79671fd74b97df5d7d96bc9326f", 0x57}, {&(0x7f0000008040)="1bd7312d9520ac0c2d0c2405c08ce6715def4b116a14523321e490554c619813b4ddf7031ddb0f", 0x27}], 0x4, &(0x7f0000008bc0)=[@rights={0x38, 0x1, 0x1, [r97, r98, r99, r100, r101, r102, r103, r104, r105, r106]}, @rights={0x38, 0x1, 0x1, [r107, r108, r109, r110, r111, r112, r113, r114, r115, r116]}, @cred={0x20, 0x1, 0x2, r117, r118, r119}, @rights={0x38, 0x1, 0x1, [r120, r121, r122, r123, r124, r125, r126, r127, r128]}, @cred={0x20, 0x1, 0x2, r129, r130, r131}], 0xe8}, {&(0x7f0000008cc0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000a140)=[{&(0x7f0000008d40)="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", 0x1000}, {&(0x7f0000009d40)="879db3abd7f28b0912e821e8384387b518ef674e5bc2137c0b2c95ad2532c07db60b158c1b8e49202c29", 0x2a}, {&(0x7f0000009d80)="d33736099da3467fde18e6e5c21a4437ec3e57250a01f7f2722e4d46677d772e6f5c5ce1318703ddc1c424d2e6c43fc919420fa5f63e4ebff83fdfeed9d5b2251abfbd2a34e66316b0a0747a0cdf", 0x4e}, {&(0x7f0000009e00)="095770fba277312869e40ec5cffd79fa511619f500ec74a052959eab0dc3c9a8fa9df6562d6c7758a6402ed56c53272733c8b20001263f838e84b38a407d9e64e9ce762c4955fae1124b9889580191c65515fc3de64c36f7817045acaa5c35465352892845f94187fd7eb1889297ecdb725e15f15363cf9ddd9058b09abc3d4f2f3d5cf860f91edb8973d41802ee31d6429b43e98bce61ad6986b26981", 0x9d}, {&(0x7f0000009ec0)="3afbe0bec9e90892b1f9483a54da4397d377de95fccd6f7d7723eb3cd12f8e2855d70e569d120fe435a079b712801bd8996fe718657715d5bcedfba47f926b594522c66e2d44377ee6e7f7aa2afe38048b8a526e708801299a0504211be83a1a909e1ea2f455fb45aecc782edbe9f92f96fecdcc3687c89c6fa77467fc5265429b1a3f79c8b225afdc1b183e292f97457b1282d5bf0f58a665b70ccbe4551b769e196dfa93", 0xa5}, {&(0x7f0000009f80)="5b7d18157fa6e4781ba4a5fadb136e55116d3f6a3fc91856ccf5783753f5468b55599bb967cc521517a5b9b4a36824208454b681139734fae95b8b357011b78feabd9a274e9522eb7530b7a25e94ce5fb4b12672c0c19212b2b1a19438ab67d1815ff4504098", 0x66}, {&(0x7f000000a000)="bd4830346c29e60a3412d7abb7edd0c4e2e5b09f83892dbe85d1995cbc56670ae41b7d361e3f0cc43a4d8a4975de7302200c9bc33d69a0deced61d8cb7d6f30f5d112dbd89064bfaf1138c574f31f982429667fb8b174b49c62f94c469bb7251993cc2e97333132c948f927213d53787bc08cfc328f9f6e9b60ff2df2bc2c19e7d4cc67da674ead4af02dd7ef349d9542109c0247e0897855491e27e0a70da33c84e535ea90f69dad58af7f4f044eecf8b9f48720d3cd73920320e68b8c4696ce5eb7924c7969821f304a97c30754db30dfce6201bc1cb60b22a23d43bbf68c29b5b8d5caf9446149e48daa4ecfa0bb9ec5d01f75876e0ab4c3a7f7352", 0xfd}, {&(0x7f000000a100)="aeee87e16fa3e842c70b9fad75df082987e68e2976f32664bbbda56e9792602fdad338136f2066", 0x27}], 0x8}], 0x9, 0x4000000) r132 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r132, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) [ 983.618313][T14928] CPU: 1 PID: 14928 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 983.626361][T14928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.636434][T14928] Call Trace: [ 983.639745][T14928] dump_stack+0x172/0x1f0 [ 983.644089][T14928] should_fail.cold+0xa/0x15 [ 983.648694][T14928] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 983.654515][T14928] ? ___might_sleep+0x163/0x280 [ 983.659389][T14928] __should_failslab+0x121/0x190 05:58:43 executing program 2: iopl(0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0x80000001) [ 983.664340][T14928] should_failslab+0x9/0x14 [ 983.668870][T14928] kmem_cache_alloc+0x2b2/0x6f0 [ 983.673736][T14928] ? __might_sleep+0x95/0x190 [ 983.678429][T14928] __anon_vma_prepare+0x62/0x3c0 [ 983.683377][T14928] ? __pte_alloc+0x1ba/0x310 [ 983.687971][T14928] __handle_mm_fault+0x34db/0x3ec0 [ 983.693095][T14928] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 983.698640][T14928] ? find_held_lock+0x35/0x130 [ 983.703399][T14928] ? handle_mm_fault+0x322/0xb30 [ 983.708321][T14928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 983.714640][T14928] ? kasan_check_read+0x11/0x20 [ 983.719485][T14928] handle_mm_fault+0x43f/0xb30 [ 983.724243][T14928] __get_user_pages+0x7b6/0x1a40 [ 983.729158][T14928] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 983.734618][T14928] ? follow_page_mask+0x19a0/0x19a0 [ 983.739805][T14928] ? retint_kernel+0x2d/0x2d [ 983.744389][T14928] get_user_pages_remote+0x21d/0x440 [ 983.749672][T14928] copy_strings.isra.0+0x3dc/0x890 [ 983.754776][T14928] ? remove_arg_zero+0x590/0x590 [ 983.759704][T14928] ? prepare_binprm+0x6aa/0x940 [ 983.764531][T14928] ? lock_downgrade+0x880/0x880 [ 983.769446][T14928] ? vma_link+0x117/0x180 [ 983.773754][T14928] ? install_exec_creds+0x180/0x180 [ 983.778930][T14928] copy_strings_kernel+0xa5/0x110 [ 983.783936][T14928] __do_execve_file.isra.0+0x10ef/0x23f0 [ 983.789556][T14928] ? copy_strings_kernel+0x110/0x110 [ 983.794837][T14928] ? strncpy_from_user+0x2a8/0x380 [ 983.799932][T14928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 983.806156][T14928] __x64_sys_execveat+0xed/0x130 [ 983.811077][T14928] do_syscall_64+0x103/0x610 [ 983.815663][T14928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.821539][T14928] RIP: 0033:0x458da9 [ 983.825414][T14928] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.845104][T14928] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 983.853496][T14928] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 983.861448][T14928] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 05:58:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 983.869407][T14928] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 983.877365][T14928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 983.885418][T14928] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:44 executing program 3 (fault-call:3 fault-nth:21): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:44 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:44 executing program 4: 05:58:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) r1 = dup(r0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x48, &(0x7f0000000080)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000}, @in6={0xa, 0x4e24, 0x1ff, @mcast2, 0xfa9b}]}, &(0x7f0000000140)=0x10) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000200)={0x7, 0x7}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0x9}, &(0x7f00000001c0)=0x8) 05:58:44 executing program 4: 05:58:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:44 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x4, 0x4) accept$packet(r0, 0x0, &(0x7f0000000140)) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000000c0)=""/121) [ 984.466398][T15127] FAULT_INJECTION: forcing a failure. [ 984.466398][T15127] name failslab, interval 1, probability 0, space 0, times 0 05:58:44 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:44 executing program 4: syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') syz_execute_func(&(0x7f0000000680)="4a2be966420f72f0f5980f0578f3aec4a37bf0c50341e2e926b5c9f34a0f38f601216a313100c46110c2a60a000000a446da4e3292221322131dd919dec4c6c100dc55b1e617c980008080e2859ed23c788fe97c810f69e08f4cbec5c4c2858c3f8fc4a1c573d1f6c4613fc21d9053c7ab86c4213e537700c4e13ddadf497dbf8259438f34b20f68803000000056f20fbd63c366410ffe3a168728ea0ff341ab00fe8f08e4a25600b1355809580900000081660fdf53098f49609a56c402795837c4027d78d3dee450c1f041f2446f46dec43b7d0fe4d6f4c462fd982c7bca30cac4017a7fc3bb3cbb3c0209912af3430f47bb00000000000045dc0f845000f04781ae00100000f10000002e470fae801200000066719cc4234546bb3a233333004805dfdf63a5b76e0b0ba17ae64295589cffffc3c4c27197a8820000004577cbc4c1465901e42ec49d47400d00080000000002020606b274c4410ff9720d838f09e89a5b00ddfafa485c835e2ec4c44281a806c44115638b0c0000002cb18374fb0a07c40155f64e0666460f0f77dd15c77ddd15c77d0f38058b97619236c421c96b82e262632097978f2978e13247cc66420f1a436e2ef246e16d44800170bb00004242fbc9880c00c461b016a7df6900003422") syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c366440f56c9660f3a16649c6700c4617b12e5c441dfd04b00c442019dcc0f11d46f") syz_execute_func(&(0x7f00000018c0)="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") [ 984.573455][T15127] CPU: 0 PID: 15127 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 984.581483][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.591539][T15127] Call Trace: [ 984.594843][T15127] dump_stack+0x172/0x1f0 [ 984.599194][T15127] should_fail.cold+0xa/0x15 [ 984.603800][T15127] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 984.609627][T15127] ? ___might_sleep+0x163/0x280 [ 984.614505][T15127] __should_failslab+0x121/0x190 [ 984.619451][T15127] should_failslab+0x9/0x14 [ 984.623963][T15127] kmem_cache_alloc+0x2b2/0x6f0 [ 984.628820][T15127] ? __might_sleep+0x95/0x190 [ 984.633504][T15127] __anon_vma_prepare+0x1b1/0x3c0 [ 984.638527][T15127] ? __pte_alloc+0x1ba/0x310 [ 984.643203][T15127] __handle_mm_fault+0x34db/0x3ec0 [ 984.648498][T15127] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 984.654024][T15127] ? find_held_lock+0x35/0x130 [ 984.658766][T15127] ? handle_mm_fault+0x322/0xb30 [ 984.663684][T15127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.669901][T15127] ? kasan_check_read+0x11/0x20 [ 984.674734][T15127] handle_mm_fault+0x43f/0xb30 [ 984.679476][T15127] __get_user_pages+0x7b6/0x1a40 [ 984.684398][T15127] ? follow_page_mask+0x19a0/0x19a0 [ 984.689584][T15127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.695807][T15127] get_user_pages_remote+0x21d/0x440 [ 984.701078][T15127] copy_strings.isra.0+0x3dc/0x890 [ 984.706171][T15127] ? remove_arg_zero+0x590/0x590 [ 984.711085][T15127] ? prepare_binprm+0x6aa/0x940 [ 984.715918][T15127] ? lock_downgrade+0x880/0x880 [ 984.720743][T15127] ? vma_link+0x117/0x180 [ 984.725053][T15127] ? install_exec_creds+0x180/0x180 [ 984.730231][T15127] copy_strings_kernel+0xa5/0x110 [ 984.735236][T15127] __do_execve_file.isra.0+0x10ef/0x23f0 [ 984.740851][T15127] ? copy_strings_kernel+0x110/0x110 [ 984.746125][T15127] ? strncpy_from_user+0x2a8/0x380 [ 984.751217][T15127] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.757451][T15127] __x64_sys_execveat+0xed/0x130 [ 984.762379][T15127] do_syscall_64+0x103/0x610 [ 984.766952][T15127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.772822][T15127] RIP: 0033:0x458da9 [ 984.776732][T15127] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.796365][T15127] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 984.804912][T15127] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 984.812868][T15127] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 984.820831][T15127] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 984.828784][T15127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 984.836739][T15127] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:45 executing program 3 (fault-call:3 fault-nth:22): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde030000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:45 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x4013, r0, 0xa) 05:58:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:45 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:45 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 985.274007][T15419] FAULT_INJECTION: forcing a failure. [ 985.274007][T15419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 985.312427][T15419] CPU: 0 PID: 15419 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 985.320442][T15419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.320449][T15419] Call Trace: [ 985.320473][T15419] dump_stack+0x172/0x1f0 [ 985.320494][T15419] should_fail.cold+0xa/0x15 [ 985.320516][T15419] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 985.348527][T15419] ? ___might_sleep+0x163/0x280 [ 985.353395][T15419] should_fail_alloc_page+0x50/0x60 [ 985.358595][T15419] __alloc_pages_nodemask+0x1a1/0x8d0 [ 985.358609][T15419] ? __anon_vma_prepare+0x184/0x3c0 05:58:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 985.358628][T15419] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 985.377379][T15419] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 985.383629][T15419] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 985.389882][T15419] alloc_pages_vma+0xdd/0x540 [ 985.394579][T15419] __handle_mm_fault+0x1dd4/0x3ec0 [ 985.399710][T15419] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 985.405261][T15419] ? find_held_lock+0x35/0x130 [ 985.410031][T15419] ? handle_mm_fault+0x322/0xb30 [ 985.414983][T15419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 05:58:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 985.421235][T15419] ? kasan_check_read+0x11/0x20 [ 985.426095][T15419] handle_mm_fault+0x43f/0xb30 [ 985.430866][T15419] __get_user_pages+0x7b6/0x1a40 [ 985.435831][T15419] ? follow_page_mask+0x19a0/0x19a0 [ 985.441035][T15419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.447287][T15419] get_user_pages_remote+0x21d/0x440 [ 985.452597][T15419] copy_strings.isra.0+0x3dc/0x890 [ 985.457722][T15419] ? remove_arg_zero+0x590/0x590 [ 985.462658][T15419] ? prepare_binprm+0x6aa/0x940 [ 985.462675][T15419] ? lock_downgrade+0x880/0x880 [ 985.462688][T15419] ? vma_link+0x117/0x180 [ 985.462706][T15419] ? install_exec_creds+0x180/0x180 [ 985.472376][T15419] copy_strings_kernel+0xa5/0x110 [ 985.472398][T15419] __do_execve_file.isra.0+0x10ef/0x23f0 [ 985.472423][T15419] ? copy_strings_kernel+0x110/0x110 [ 985.472437][T15419] ? strncpy_from_user+0x2a8/0x380 [ 985.472455][T15419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.472473][T15419] __x64_sys_execveat+0xed/0x130 [ 985.472491][T15419] do_syscall_64+0x103/0x610 [ 985.472510][T15419] entry_SYSCALL_64_after_hwframe+0x49/0xbe 05:58:45 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 985.524581][T15419] RIP: 0033:0x458da9 [ 985.528485][T15419] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.548096][T15419] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 985.556512][T15419] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 985.564487][T15419] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 985.572467][T15419] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 985.580446][T15419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 985.588427][T15419] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:46 executing program 3 (fault-call:3 fault-nth:23): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) 05:58:46 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:46 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 986.141934][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 986.141947][ T26] audit: type=1800 audit(1556776726.216:106): pid=15698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=9 res=0 05:58:46 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) [ 986.241972][T15867] FAULT_INJECTION: forcing a failure. [ 986.241972][T15867] name failslab, interval 1, probability 0, space 0, times 0 [ 986.263415][ T26] audit: type=1326 audit(1556776726.246:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15702 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:46 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400003, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x1e) write$sndseq(r0, &(0x7f0000000080)=[{0x200, 0x0, 0x0, 0x0, @time={0x77359400}, {0x5, 0x80fffff0}, {}, @queue={0xff, {0xffffffff, 0x7a0}}}], 0x30) truncate(&(0x7f0000000040)='./file0\x00', 0x8000) [ 986.265322][T15867] CPU: 0 PID: 15867 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 986.293261][T15867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.303332][T15867] Call Trace: [ 986.306634][T15867] dump_stack+0x172/0x1f0 [ 986.310969][T15867] should_fail.cold+0xa/0x15 [ 986.315563][T15867] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 986.321377][T15867] ? ___might_sleep+0x163/0x280 [ 986.326239][T15867] __should_failslab+0x121/0x190 [ 986.331196][T15867] should_failslab+0x9/0x14 [ 986.335700][T15867] kmem_cache_alloc_trace+0x2d1/0x760 [ 986.341156][T15867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 986.347406][T15867] tomoyo_find_next_domain+0xe4/0x1f8a [ 986.352853][T15867] ? mark_held_locks+0xf0/0xf0 [ 986.357704][T15867] ? __lock_acquire+0x548/0x3fb0 [ 986.362619][T15867] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 986.368840][T15867] ? tomoyo_dump_page+0x510/0x510 [ 986.373967][T15867] ? lock_acquire+0x16f/0x3f0 [ 986.378624][T15867] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 986.384438][T15867] tomoyo_bprm_check_security+0x12a/0x1b0 [ 986.390131][T15867] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 986.395917][T15867] security_bprm_check+0x69/0xb0 [ 986.400833][T15867] search_binary_handler+0x77/0x570 [ 986.406010][T15867] ? kasan_check_read+0x11/0x20 [ 986.410847][T15867] __do_execve_file.isra.0+0x1394/0x23f0 [ 986.416485][T15867] ? copy_strings_kernel+0x110/0x110 [ 986.421758][T15867] ? strncpy_from_user+0x2a8/0x380 [ 986.426864][T15867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 986.433121][T15867] __x64_sys_execveat+0xed/0x130 [ 986.438043][T15867] do_syscall_64+0x103/0x610 [ 986.442636][T15867] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.448507][T15867] RIP: 0033:0x458da9 [ 986.452384][T15867] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 986.471965][T15867] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 986.480359][T15867] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 05:58:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:46 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) [ 986.488323][T15867] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 986.496395][T15867] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 986.504460][T15867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 986.512436][T15867] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 [ 986.677744][ T26] audit: type=1800 audit(1556776726.742:108): pid=15983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=10 res=0 [ 986.758056][ T26] audit: type=1800 audit(1556776726.801:109): pid=16028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=11 res=0 [ 986.787438][ T26] audit: type=1804 audit(1556776726.801:110): pid=16028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir511471804/syzkaller.08APuo/1968/file0/file0" dev="loop4" ino=11 res=1 05:58:47 executing program 3 (fault-call:3 fault-nth:24): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:47 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x90000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:47 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:47 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 987.076331][ T26] audit: type=1800 audit(1556776727.138:111): pid=16041 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=12 res=0 05:58:47 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) [ 987.115701][ T26] audit: type=1326 audit(1556776727.168:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16040 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 987.155411][T16119] FAULT_INJECTION: forcing a failure. [ 987.155411][T16119] name failslab, interval 1, probability 0, space 0, times 0 [ 987.224259][T16119] CPU: 0 PID: 16119 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 987.232294][T16119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.242366][T16119] Call Trace: [ 987.245680][T16119] dump_stack+0x172/0x1f0 [ 987.250030][T16119] should_fail.cold+0xa/0x15 [ 987.254646][T16119] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 987.260464][T16119] ? ___might_sleep+0x163/0x280 [ 987.265413][T16119] __should_failslab+0x121/0x190 05:58:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 987.270362][T16119] should_failslab+0x9/0x14 [ 987.274871][T16119] kmem_cache_alloc_trace+0x2d1/0x760 [ 987.280273][T16119] tomoyo_find_next_domain+0x12c/0x1f8a [ 987.285833][T16119] ? mark_held_locks+0xf0/0xf0 [ 987.290611][T16119] ? __lock_acquire+0x548/0x3fb0 [ 987.295564][T16119] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 987.301828][T16119] ? tomoyo_dump_page+0x510/0x510 [ 987.301847][T16119] ? lock_acquire+0x16f/0x3f0 [ 987.301862][T16119] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 987.301882][T16119] tomoyo_bprm_check_security+0x12a/0x1b0 [ 987.301894][T16119] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 987.301918][T16119] security_bprm_check+0x69/0xb0 [ 987.311602][T16119] search_binary_handler+0x77/0x570 [ 987.311619][T16119] ? kasan_check_read+0x11/0x20 [ 987.311637][T16119] __do_execve_file.isra.0+0x1394/0x23f0 [ 987.311659][T16119] ? copy_strings_kernel+0x110/0x110 [ 987.311673][T16119] ? strncpy_from_user+0x2a8/0x380 [ 987.311691][T16119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.311708][T16119] __x64_sys_execveat+0xed/0x130 05:58:47 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) fcntl$setsig(r0, 0xa, 0x23) [ 987.311731][T16119] do_syscall_64+0x103/0x610 [ 987.329096][T16119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.329107][T16119] RIP: 0033:0x458da9 [ 987.329125][T16119] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.344066][T16119] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 987.344082][T16119] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 05:58:47 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xc700000e) [ 987.344091][T16119] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 987.344106][T16119] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 987.423690][T16119] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 987.423699][T16119] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:47 executing program 3 (fault-call:3 fault-nth:25): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:47 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:47 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:47 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x31e6) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) readv(r1, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) write$sndseq(r0, &(0x7f00000000c0)=[{0xca3, 0x6e, 0x100, 0x2, @tick=0x80000001, {0x11, 0x485f744c}, {0x20}, @quote={{0xf3, 0xffffffff}, 0x3}}], 0x30) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:47 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 987.997173][ T26] audit: type=1326 audit(1556776728.060:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16587 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 988.047270][T16657] FAULT_INJECTION: forcing a failure. [ 988.047270][T16657] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 988.060643][T16657] CPU: 1 PID: 16657 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 988.068629][T16657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.078685][T16657] Call Trace: [ 988.082002][T16657] dump_stack+0x172/0x1f0 [ 988.086350][T16657] should_fail.cold+0xa/0x15 [ 988.090948][T16657] ? tomoyo_bprm_check_security+0x12a/0x1b0 [ 988.096854][T16657] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 988.102699][T16657] ? kasan_check_read+0x11/0x20 [ 988.107566][T16657] ? do_raw_spin_unlock+0x57/0x270 [ 988.112694][T16657] should_fail_alloc_page+0x50/0x60 [ 988.117904][T16657] __alloc_pages_nodemask+0x1a1/0x8d0 [ 988.123299][T16657] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 988.129036][T16657] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 988.134883][T16657] cache_grow_begin+0x9c/0x860 [ 988.139651][T16657] ? tomoyo_find_next_domain+0x12c/0x1f8a [ 988.145370][T16657] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 988.151619][T16657] kmem_cache_alloc_trace+0x67f/0x760 [ 988.157005][T16657] tomoyo_find_next_domain+0x12c/0x1f8a [ 988.162643][T16657] ? mark_held_locks+0xf0/0xf0 [ 988.167400][T16657] ? __lock_acquire+0x548/0x3fb0 [ 988.167416][T16657] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 988.167438][T16657] ? tomoyo_dump_page+0x510/0x510 [ 988.167455][T16657] ? lock_acquire+0x16f/0x3f0 [ 988.178595][T16657] ? tomoyo_bprm_check_security+0xe3/0x1b0 05:58:48 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1054}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:48 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:48 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x0, 0x3, 0x3ff, 0x2, 0x800000000000}, 0x6, 0x8}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20000, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) [ 988.178615][T16657] tomoyo_bprm_check_security+0x12a/0x1b0 [ 988.178633][T16657] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 988.213946][T16657] security_bprm_check+0x69/0xb0 [ 988.218984][T16657] search_binary_handler+0x77/0x570 [ 988.224205][T16657] ? kasan_check_read+0x11/0x20 [ 988.229061][T16657] __do_execve_file.isra.0+0x1394/0x23f0 [ 988.234707][T16657] ? copy_strings_kernel+0x110/0x110 [ 988.240003][T16657] ? strncpy_from_user+0x2a8/0x380 [ 988.245100][T16657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 988.251336][T16657] __x64_sys_execveat+0xed/0x130 [ 988.256258][T16657] do_syscall_64+0x103/0x610 [ 988.260830][T16657] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.266703][T16657] RIP: 0033:0x458da9 [ 988.270582][T16657] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 988.290161][T16657] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 988.298643][T16657] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 988.306594][T16657] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 988.314545][T16657] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 988.322497][T16657] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 988.330452][T16657] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 [ 988.524601][ T26] audit: type=1800 audit(1556776728.576:114): pid=16923 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=13 res=0 05:58:48 executing program 3 (fault-call:3 fault-nth:26): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:48 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x1) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) prctl$PR_GET_THP_DISABLE(0x2a) socketpair(0xa, 0x80800, 0x200, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {0x5, 0x80fffff0}, {0x0, 0x3}, @quote}], 0xffffffffffffff46) syz_extract_tcp_res$synack(&(0x7f0000000480)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1f000000395545899e02f0b6029078000103030500ef7a0ab48344"], 0x13f) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x7, 0x3b98}, &(0x7f0000000180)=0x90) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r2, 0x28, &(0x7f00000003c0)}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x3}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r5, 0x3, 0x30}, 0xc) 05:58:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:48 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:48 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5410}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 988.865734][ T26] audit: type=1326 audit(1556776728.923:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17040 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 05:58:48 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 988.933545][T17049] FAULT_INJECTION: forcing a failure. [ 988.933545][T17049] name failslab, interval 1, probability 0, space 0, times 0 05:58:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x8000, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) 05:58:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 989.003523][T17049] CPU: 1 PID: 17049 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 989.011557][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.021622][T17049] Call Trace: [ 989.024925][T17049] dump_stack+0x172/0x1f0 [ 989.029275][T17049] should_fail.cold+0xa/0x15 [ 989.033879][T17049] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 989.039697][T17049] ? ___might_sleep+0x163/0x280 [ 989.044558][T17049] __should_failslab+0x121/0x190 [ 989.049503][T17049] should_failslab+0x9/0x14 05:58:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 989.054009][T17049] kmem_cache_alloc+0x2b2/0x6f0 [ 989.058869][T17049] getname_kernel+0x53/0x370 [ 989.063469][T17049] kern_path+0x20/0x40 [ 989.067539][T17049] tomoyo_realpath_nofollow+0x74/0xdb [ 989.073006][T17049] ? tomoyo_realpath_from_path+0x730/0x730 [ 989.078894][T17049] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 989.085114][T17049] ? tomoyo_init_request_info+0x105/0x1d0 [ 989.090817][T17049] tomoyo_find_next_domain+0x28c/0x1f8a [ 989.096390][T17049] ? mark_held_locks+0xf0/0xf0 [ 989.101139][T17049] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 989.107373][T17049] ? tomoyo_dump_page+0x510/0x510 [ 989.112373][T17049] ? lock_acquire+0x16f/0x3f0 [ 989.117033][T17049] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 989.122832][T17049] tomoyo_bprm_check_security+0x12a/0x1b0 [ 989.128529][T17049] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 989.134316][T17049] security_bprm_check+0x69/0xb0 [ 989.139234][T17049] search_binary_handler+0x77/0x570 [ 989.144413][T17049] ? kasan_check_read+0x11/0x20 [ 989.149246][T17049] __do_execve_file.isra.0+0x1394/0x23f0 [ 989.154859][T17049] ? copy_strings_kernel+0x110/0x110 [ 989.160135][T17049] ? strncpy_from_user+0x2a8/0x380 [ 989.165238][T17049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.171459][T17049] __x64_sys_execveat+0xed/0x130 [ 989.176398][T17049] do_syscall_64+0x103/0x610 [ 989.180985][T17049] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.186856][T17049] RIP: 0033:0x458da9 [ 989.190729][T17049] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.210316][T17049] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 989.218711][T17049] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 989.226692][T17049] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 989.234643][T17049] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 989.242604][T17049] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 05:58:49 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) [ 989.250576][T17049] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:49 executing program 3 (fault-call:3 fault-nth:27): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:49 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:49 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x101, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {0x0, 0x4}, @quote}], 0x30) 05:58:49 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 989.791247][T17494] FAULT_INJECTION: forcing a failure. [ 989.791247][T17494] name failslab, interval 1, probability 0, space 0, times 0 [ 989.854024][T17494] CPU: 1 PID: 17494 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 989.862158][T17494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.872220][T17494] Call Trace: [ 989.875518][T17494] dump_stack+0x172/0x1f0 [ 989.879857][T17494] should_fail.cold+0xa/0x15 [ 989.884545][T17494] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 989.890371][T17494] ? __task_pid_nr_ns+0x1b1/0x530 [ 989.895422][T17494] __should_failslab+0x121/0x190 05:58:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 989.900380][T17494] should_failslab+0x9/0x14 [ 989.904889][T17494] kmem_cache_alloc_trace+0x4b/0x760 [ 989.910170][T17494] ? kasan_check_read+0x11/0x20 [ 989.915010][T17494] proc_self_get_link+0x16f/0x1d0 [ 989.920015][T17494] link_path_walk.part.0+0xeec/0x1340 [ 989.925395][T17494] ? proc_ns_dir_readdir+0x570/0x570 [ 989.930676][T17494] ? walk_component+0x2000/0x2000 [ 989.935684][T17494] ? save_stack+0x45/0xd0 [ 989.939993][T17494] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 989.945791][T17494] ? getname_kernel+0x40/0x370 [ 989.950535][T17494] path_lookupat.isra.0+0xe3/0x8d0 [ 989.955625][T17494] ? do_syscall_64+0x103/0x610 [ 989.960371][T17494] ? path_parentat.isra.0+0x160/0x160 [ 989.965724][T17494] ? cache_grow_end+0xa4/0x190 [ 989.970466][T17494] ? find_held_lock+0x35/0x130 [ 989.975241][T17494] ? cache_grow_end+0xa4/0x190 [ 989.980000][T17494] filename_lookup+0x1b0/0x410 [ 989.984792][T17494] ? nd_jump_link+0x1d0/0x1d0 [ 989.989464][T17494] ? memcpy+0x46/0x50 [ 989.993427][T17494] ? getname_kernel+0x223/0x370 [ 989.998343][T17494] kern_path+0x36/0x40 [ 990.002389][T17494] tomoyo_realpath_nofollow+0x74/0xdb [ 990.007740][T17494] ? tomoyo_realpath_from_path+0x730/0x730 [ 990.013525][T17494] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 990.019797][T17494] ? tomoyo_init_request_info+0x105/0x1d0 [ 990.025506][T17494] tomoyo_find_next_domain+0x28c/0x1f8a [ 990.031032][T17494] ? mark_held_locks+0xf0/0xf0 [ 990.035776][T17494] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 990.041999][T17494] ? tomoyo_dump_page+0x510/0x510 [ 990.047099][T17494] ? lock_acquire+0x16f/0x3f0 [ 990.051779][T17494] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 990.057573][T17494] tomoyo_bprm_check_security+0x12a/0x1b0 [ 990.063269][T17494] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 990.069056][T17494] security_bprm_check+0x69/0xb0 [ 990.073974][T17494] search_binary_handler+0x77/0x570 [ 990.079158][T17494] ? kasan_check_read+0x11/0x20 [ 990.083988][T17494] __do_execve_file.isra.0+0x1394/0x23f0 [ 990.089605][T17494] ? copy_strings_kernel+0x110/0x110 [ 990.094868][T17494] ? strncpy_from_user+0x2a8/0x380 [ 990.099971][T17494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 990.106205][T17494] __x64_sys_execveat+0xed/0x130 [ 990.111136][T17494] do_syscall_64+0x103/0x610 [ 990.115728][T17494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 990.121599][T17494] RIP: 0033:0x458da9 [ 990.125481][T17494] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 990.145072][T17494] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 05:58:50 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:50 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) [ 990.153461][T17494] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 990.161411][T17494] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 990.169360][T17494] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 990.177309][T17494] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 990.185258][T17494] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:50 executing program 3 (fault-call:3 fault-nth:28): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="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") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x1c}, 0x812}, 0x1c) clock_gettime(0xfffffffffffffffc, &(0x7f00000001c0)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000180)=[{0x3, 0xfffffffffffffffd, 0x0, 0x0, @time={r1, r2+10000000}, {0x1, 0x80fffff3}, {0xfb, 0x20}, @quote}], 0x30) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x52, "e066aaf3224691e38998a3bdf10b20bedbfe1c695d48eaaaefc41495ae0653e391e422106136af7b505586f9ab1b826196804d71ce580c8b0fda147437f32aece73b5fd86a9ec91b48ddaea8bb4285c363c0"}, &(0x7f0000000100)=0x5a) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r3, 0x5, 0x200000000000, 0x1}, 0x10) 05:58:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:50 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:50 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:50 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:50 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x801, 0x4) 05:58:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde03000000000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) [ 990.667308][T17737] FAULT_INJECTION: forcing a failure. [ 990.667308][T17737] name failslab, interval 1, probability 0, space 0, times 0 [ 990.708981][T17737] CPU: 0 PID: 17737 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 990.716999][T17737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 990.727053][T17737] Call Trace: [ 990.730351][T17737] dump_stack+0x172/0x1f0 [ 990.734681][T17737] should_fail.cold+0xa/0x15 [ 990.739270][T17737] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 990.745070][T17737] ? ___might_sleep+0x163/0x280 [ 990.749915][T17737] __should_failslab+0x121/0x190 [ 990.754841][T17737] should_failslab+0x9/0x14 [ 990.759337][T17737] kmem_cache_alloc+0x2b2/0x6f0 [ 990.764181][T17737] ? kasan_check_read+0x11/0x20 [ 990.769024][T17737] __d_alloc+0x2e/0x8c0 [ 990.773173][T17737] d_alloc+0x4d/0x2b0 [ 990.777155][T17737] ? unwind_get_return_address+0x61/0xa0 [ 990.782772][T17737] d_alloc_parallel+0xf4/0x1bc0 [ 990.787777][T17737] ? __lock_acquire+0x548/0x3fb0 [ 990.792720][T17737] ? __d_lookup_rcu+0x6c0/0x6c0 [ 990.797555][T17737] ? find_held_lock+0x35/0x130 [ 990.802296][T17737] ? __d_lookup+0x40c/0x760 [ 990.806776][T17737] ? lockdep_init_map+0x1be/0x6d0 [ 990.811787][T17737] ? lockdep_init_map+0x1be/0x6d0 [ 990.816801][T17737] __lookup_slow+0x1ab/0x500 [ 990.821369][T17737] ? vfs_unlink+0x560/0x560 [ 990.825961][T17737] ? __d_lookup+0x433/0x760 [ 990.830482][T17737] lookup_slow+0x58/0x80 [ 990.834725][T17737] walk_component+0x74b/0x2000 [ 990.839486][T17737] ? refcount_dec_not_one+0x1f0/0x1f0 [ 990.844849][T17737] ? kasan_check_read+0x11/0x20 [ 990.849692][T17737] ? path_init+0x18f0/0x18f0 [ 990.854272][T17737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 990.860502][T17737] ? security_inode_permission+0xd5/0x110 [ 990.866208][T17737] ? inode_permission+0xb4/0x570 [ 990.871146][T17737] link_path_walk.part.0+0x594/0x1340 [ 990.876512][T17737] ? walk_component+0x2000/0x2000 [ 990.881699][T17737] ? save_stack+0x45/0xd0 [ 990.886019][T17737] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 990.891816][T17737] ? getname_kernel+0x40/0x370 [ 990.896573][T17737] path_lookupat.isra.0+0xe3/0x8d0 [ 990.901775][T17737] ? do_syscall_64+0x103/0x610 [ 990.906526][T17737] ? path_parentat.isra.0+0x160/0x160 [ 990.911895][T17737] ? cache_grow_end+0xa4/0x190 [ 990.916649][T17737] ? find_held_lock+0x35/0x130 [ 990.921413][T17737] ? cache_grow_end+0xa4/0x190 [ 990.926169][T17737] filename_lookup+0x1b0/0x410 [ 990.930930][T17737] ? nd_jump_link+0x1d0/0x1d0 [ 990.935604][T17737] ? simple_attr_release+0x50/0x50 [ 990.940718][T17737] ? memcpy+0x46/0x50 [ 990.944692][T17737] ? getname_kernel+0x223/0x370 [ 990.949534][T17737] kern_path+0x36/0x40 [ 990.953604][T17737] tomoyo_realpath_nofollow+0x74/0xdb [ 990.958966][T17737] ? tomoyo_realpath_from_path+0x730/0x730 [ 990.964752][T17737] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 990.970982][T17737] ? tomoyo_init_request_info+0x105/0x1d0 [ 990.976702][T17737] tomoyo_find_next_domain+0x28c/0x1f8a [ 990.982232][T17737] ? mark_held_locks+0xf0/0xf0 [ 990.986974][T17737] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 990.993212][T17737] ? tomoyo_dump_page+0x510/0x510 [ 990.998224][T17737] ? lock_acquire+0x16f/0x3f0 [ 991.002882][T17737] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 991.008678][T17737] tomoyo_bprm_check_security+0x12a/0x1b0 [ 991.014377][T17737] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 991.020179][T17737] security_bprm_check+0x69/0xb0 [ 991.025121][T17737] search_binary_handler+0x77/0x570 [ 991.030313][T17737] ? kasan_check_read+0x11/0x20 [ 991.035170][T17737] __do_execve_file.isra.0+0x1394/0x23f0 [ 991.040803][T17737] ? copy_strings_kernel+0x110/0x110 [ 991.046076][T17737] ? strncpy_from_user+0x2a8/0x380 [ 991.051194][T17737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.057427][T17737] __x64_sys_execveat+0xed/0x130 [ 991.062362][T17737] do_syscall_64+0x103/0x610 [ 991.066938][T17737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.072812][T17737] RIP: 0033:0x458da9 [ 991.076696][T17737] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 991.096465][T17737] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 05:58:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 991.104859][T17737] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 991.112820][T17737] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 991.120787][T17737] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 991.128742][T17737] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 991.136692][T17737] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 05:58:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:51 executing program 3 (fault-call:3 fault-nth:29): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="470f52e94a2be93699980f053ef3aec4a37bf0c50241e2e9450fe36a09c462f1920cbcc4027d30ef420f5a1ea35500262ff3906646da4e329200d2dec461dc55b13e410f3809132525000e818f470f94c967450f289369000000b100673e66470f0fa21900000090853665f3490f2cf18fe97c810f69e08f4cbec5c4c2858c3f8f56388d2b0000000f01d4dfc5497dbfed304715156f2a37ad59438f34b267f36ab4c4c2e9adc2564105ba16f2ae263ef367650f0fb30080000094c4c29d962150386c6cb3f9b3f9491feefe8f08e4a25600b1500909660fdf530967410f58d1e289e2897474e4b6c1f0433e660feee4440f704eee9846dec43b7d0f12e400f4c4617be6d2c4017a7fc3c4c1225cf909912af3430f47bb00000000000045126d6d8450000000c44299deb76a5babb9c421f9e759003e65660f5cb54c0a0000dd4805c462a52b6e0b8fa810ecd6091a1af20fa576acffff65d085431fe720bd7c6d83004577cbf043806d040ef4b0f43ef3430faedf1002970606b2aa8fa8689fb900100002dac422e6912cb18374fb0a0766440fe5bf2c470000f247acc4a2dd910cb1ed36660f38058b976192361d09f4f5e5978847915e02c1045c0b47cc47cc5c389f9f060f0f2ef217640f28006c6c01a9bb000042d8fb4974ec0b31c422358c083422") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:51 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x4, @tick, {0x5, 0x80fffff0}, {0x5cdd}, @connect={{0x6, 0x86}, {0x1000, 0x7fff}}}], 0x30) 05:58:51 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) 05:58:51 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:51 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x81) tee(r1, r1, 0x5, 0x3) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x80, 0x1) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=unix,', {[{@posixacl='posixacl'}, {@access_any='access=any'}, {@version_u='version=9p2000.u'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) [ 991.540317][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 991.540331][ T26] audit: type=1326 audit(1556776731.571:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18071 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 991.614135][T18076] FAULT_INJECTION: forcing a failure. [ 991.614135][T18076] name failslab, interval 1, probability 0, space 0, times 0 [ 991.682264][ T26] audit: type=1800 audit(1556776731.710:122): pid=18084 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=16 res=0 [ 991.715610][T18076] CPU: 1 PID: 18076 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 05:58:51 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) [ 991.723624][T18076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.723661][T18076] Call Trace: [ 991.723691][T18076] dump_stack+0x172/0x1f0 [ 991.743786][T18076] should_fail.cold+0xa/0x15 [ 991.748392][T18076] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 991.754211][T18076] ? ___might_sleep+0x163/0x280 [ 991.759079][T18076] __should_failslab+0x121/0x190 [ 991.764022][T18076] should_failslab+0x9/0x14 [ 991.768719][T18076] kmem_cache_alloc+0x2b2/0x6f0 [ 991.773581][T18076] ? lock_downgrade+0x880/0x880 [ 991.778442][T18076] __d_alloc+0x2e/0x8c0 05:58:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 991.782608][T18076] d_alloc+0x4d/0x2b0 [ 991.786607][T18076] d_alloc_parallel+0xf4/0x1bc0 [ 991.791464][T18076] ? __lock_acquire+0x548/0x3fb0 [ 991.796501][T18076] ? __d_lookup_rcu+0x6c0/0x6c0 [ 991.801357][T18076] ? find_held_lock+0x35/0x130 [ 991.806130][T18076] ? lockdep_init_map+0x1be/0x6d0 [ 991.811164][T18076] ? lockdep_init_map+0x1be/0x6d0 [ 991.816196][T18076] __lookup_slow+0x1ab/0x500 [ 991.820794][T18076] ? vfs_unlink+0x560/0x560 [ 991.825299][T18076] ? __d_lookup+0x433/0x760 05:58:51 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:51 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x3, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) [ 991.829828][T18076] lookup_slow+0x58/0x80 [ 991.834086][T18076] walk_component+0x74b/0x2000 [ 991.838855][T18076] ? inode_permission+0xb4/0x570 [ 991.843801][T18076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 991.850048][T18076] ? path_init+0x18f0/0x18f0 [ 991.854655][T18076] ? walk_component+0x2000/0x2000 [ 991.859684][T18076] ? save_stack+0x45/0xd0 [ 991.864018][T18076] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 991.869837][T18076] ? getname_kernel+0x40/0x370 [ 991.874602][T18076] path_lookupat.isra.0+0x1f5/0x8d0 [ 991.879778][T18076] ? do_syscall_64+0x103/0x610 [ 991.884528][T18076] ? path_parentat.isra.0+0x160/0x160 [ 991.889896][T18076] ? cache_grow_end+0xa4/0x190 [ 991.894639][T18076] ? find_held_lock+0x35/0x130 [ 991.899382][T18076] ? cache_grow_end+0xa4/0x190 [ 991.904127][T18076] filename_lookup+0x1b0/0x410 [ 991.908871][T18076] ? nd_jump_link+0x1d0/0x1d0 [ 991.913535][T18076] ? simple_attr_release+0x50/0x50 [ 991.918647][T18076] ? memcpy+0x46/0x50 [ 991.922621][T18076] ? getname_kernel+0x223/0x370 [ 991.927458][T18076] kern_path+0x36/0x40 [ 991.931528][T18076] tomoyo_realpath_nofollow+0x74/0xdb [ 991.936879][T18076] ? tomoyo_realpath_from_path+0x730/0x730 [ 991.942685][T18076] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 991.948906][T18076] ? tomoyo_init_request_info+0x105/0x1d0 [ 991.954610][T18076] tomoyo_find_next_domain+0x28c/0x1f8a [ 991.960149][T18076] ? mark_held_locks+0xf0/0xf0 [ 991.964893][T18076] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 991.971121][T18076] ? tomoyo_dump_page+0x510/0x510 [ 991.976142][T18076] ? lock_acquire+0x16f/0x3f0 [ 991.980815][T18076] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 991.986606][T18076] tomoyo_bprm_check_security+0x12a/0x1b0 [ 991.992317][T18076] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 991.998108][T18076] security_bprm_check+0x69/0xb0 [ 992.003025][T18076] search_binary_handler+0x77/0x570 [ 992.008254][T18076] ? kasan_check_read+0x11/0x20 [ 992.013097][T18076] __do_execve_file.isra.0+0x1394/0x23f0 [ 992.018712][T18076] ? copy_strings_kernel+0x110/0x110 [ 992.023971][T18076] ? strncpy_from_user+0x2a8/0x380 [ 992.029070][T18076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 992.035293][T18076] __x64_sys_execveat+0xed/0x130 [ 992.040236][T18076] do_syscall_64+0x103/0x610 [ 992.044820][T18076] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.050688][T18076] RIP: 0033:0x458da9 [ 992.054564][T18076] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.074162][T18076] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 992.082639][T18076] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 992.090598][T18076] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 992.098552][T18076] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 992.106521][T18076] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 992.114482][T18076] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 [ 992.136869][ T26] audit: type=1800 audit(1556776732.156:123): pid=18086 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="loop4" ino=17 res=0 [ 992.252712][ T26] audit: type=1804 audit(1556776732.156:124): pid=18086 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir511471804/syzkaller.08APuo/1977/file0/file0" dev="loop4" ino=17 res=1 05:58:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) 05:58:52 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:52 executing program 3 (fault-call:3 fault-nth:30): seccomp(0x0, 0x0, 0x0) syz_execute_func(&(0x7f0000000a00)="470f52e94a2be93699980f053ef3aec4a37bf0c50241e2e9450fe36a09c462f1920cbcc4027d30ef420f5a1ea35500262ff3906646da4e329200d2dec461dc55b13e410f3809132525000e818f470f94c967450f289369000000b100673e66470f0fa21900000090853665f3490f2cf18fe97c810f69e08f4cbec5c4c2858c3f8f56388d2b0000000f01d4dfc5497dbfed304715156f2a37ad59438f34b267f36ab4c4c2e9adc2564105ba16f2ae263ef367650f0fb30080000094c4c29d962150386c6cb3f9b3f9491feefe8f08e4a25600b1500909660fdf530967410f58d1e289e2897474e4b6c1f0433e660feee4440f704eee9846dec43b7d0f12e400f4c4617be6d2c4017a7fc3c4c1225cf909912af3430f47bb00000000000045126d6d8450000000c44299deb76a5babb9c421f9e759003e65660f5cb54c0a0000dd4805c462a52b6e0b8fa810ecd6091a1af20fa576acffff65d085431fe720bd7c6d83004577cbf043806d040ef4b0f43ef3430faedf1002970606b2aa8fa8689fb900100002dac422e6912cb18374fb0a0766440fe5bf2c470000f247acc4a2dd910cb1ed36660f38058b976192361d09f4f5e5978847915e02c1045c0b47cc47cc5c389f9f060f0f2ef217640f28006c6c01a9bb000042d8fb4974ec0b31c422358c083422") r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x06\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 05:58:52 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) socket$nl_xfrm(0x10, 0x3, 0x6) 05:58:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 992.498951][ T26] audit: type=1326 audit(1556776732.523:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18409 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45bc0a code=0x0 [ 992.549650][T18492] FAULT_INJECTION: forcing a failure. [ 992.549650][T18492] name failslab, interval 1, probability 0, space 0, times 0 05:58:52 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x3}}}, 0xc0}}, 0x0) 05:58:52 executing program 1: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000640)={@null=' \x00', 0xe, 'bond0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, 0xffffffffffffffff, 0x0, 0xc700000e) [ 992.640635][T18492] CPU: 1 PID: 18492 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 992.648675][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.658737][T18492] Call Trace: [ 992.662047][T18492] dump_stack+0x172/0x1f0 [ 992.666404][T18492] should_fail.cold+0xa/0x15 [ 992.671010][T18492] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 992.676835][T18492] ? ___might_sleep+0x163/0x280 [ 992.681701][T18492] __should_failslab+0x121/0x190 [ 992.686649][T18492] should_failslab+0x9/0x14 [ 992.691206][T18492] __kmalloc+0x2dc/0x740 [ 992.695456][T18492] ? tomoyo_realpath_from_path+0xba/0x730 [ 992.701170][T18492] ? rcu_read_lock_sched_held+0x110/0x130 [ 992.706892][T18492] ? tomoyo_realpath_from_path+0xc7/0x730 [ 992.713220][T18492] tomoyo_realpath_from_path+0xc7/0x730 [ 992.718886][T18492] tomoyo_realpath_nofollow+0xc8/0xdb [ 992.724266][T18492] ? tomoyo_realpath_from_path+0x730/0x730 [ 992.730082][T18492] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 992.736328][T18492] ? tomoyo_init_request_info+0x105/0x1d0 [ 992.742056][T18492] tomoyo_find_next_domain+0x28c/0x1f8a [ 992.747602][T18492] ? mark_held_locks+0xf0/0xf0 [ 992.752367][T18492] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 992.758604][T18492] ? tomoyo_dump_page+0x510/0x510 [ 992.763629][T18492] ? lock_acquire+0x16f/0x3f0 [ 992.768291][T18492] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 992.774082][T18492] tomoyo_bprm_check_security+0x12a/0x1b0 [ 992.779881][T18492] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 992.785675][T18492] security_bprm_check+0x69/0xb0 [ 992.790597][T18492] search_binary_handler+0x77/0x570 [ 992.795779][T18492] ? kasan_check_read+0x11/0x20 [ 992.800704][T18492] __do_execve_file.isra.0+0x1394/0x23f0 [ 992.806325][T18492] ? copy_strings_kernel+0x110/0x110 [ 992.811593][T18492] ? strncpy_from_user+0x2a8/0x380 [ 992.816687][T18492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 992.822911][T18492] __x64_sys_execveat+0xed/0x130 [ 992.827938][T18492] do_syscall_64+0x103/0x610 [ 992.832511][T18492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.838385][T18492] RIP: 0033:0x458da9 [ 992.842259][T18492] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 992.861842][T18492] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 992.870242][T18492] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 992.878195][T18492] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 05:58:52 executing program 4: read$rfkill(0xffffffffffffffff, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044dfe, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000001c0)={{0x10000, 0x3}, {0x0, 0x9}, 0xb28, 0x3, 0x86}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) fsync(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40c2, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open$dir(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000400)="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", 0x200) sendfile(r2, r3, 0x0, 0xc700000e) 05:58:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@polexpire={0xc0, 0x1b, 0x31, 0x0, 0x0, {{{@in=@dev, @in6=@local}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, 0x0, 0x2}}}, 0xc0}}, 0x0) [ 992.886146][T18492] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 992.894098][T18492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 992.902083][T18492] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 [ 992.924825][T18492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 992.947608][T18492] Kernel panic - not syncing: MAC Initialization failed. [ 992.954681][T18492] CPU: 0 PID: 18492 Comm: syz-executor.3 Not tainted 5.1.0-rc7+ #96 [ 992.962737][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.972828][T18492] Call Trace: [ 992.976129][T18492] dump_stack+0x172/0x1f0 [ 992.980475][T18492] panic+0x2cb/0x65c [ 992.984376][T18492] ? __warn_printk+0xf3/0xf3 [ 992.988985][T18492] ? tomoyo_realpath_from_path+0x394/0x730 05:58:53 executing program 2: write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x5, 0x80fffff0}, {}, @quote}], 0x30) socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x44d, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000100)=0xb1e9) sysinfo(&(0x7f0000000080)=""/80) [ 992.994807][T18492] ? tomoyo_warn_oom.cold+0x24/0x43 [ 993.000028][T18492] tomoyo_warn_oom.cold+0x35/0x43 [ 993.005110][T18492] tomoyo_realpath_from_path+0x3a8/0x730 [ 993.010730][T18492] tomoyo_realpath_nofollow+0xc8/0xdb [ 993.016083][T18492] ? tomoyo_realpath_from_path+0x730/0x730 [ 993.021977][T18492] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 993.028201][T18492] ? tomoyo_init_request_info+0x105/0x1d0 [ 993.034105][T18492] tomoyo_find_next_domain+0x28c/0x1f8a [ 993.039635][T18492] ? mark_held_locks+0xf0/0xf0 [ 993.044383][T18492] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 993.050622][T18492] ? tomoyo_dump_page+0x510/0x510 [ 993.055636][T18492] ? lock_acquire+0x16f/0x3f0 [ 993.060294][T18492] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 993.066258][T18492] tomoyo_bprm_check_security+0x12a/0x1b0 [ 993.071965][T18492] ? tomoyo_bprm_check_security+0xe3/0x1b0 [ 993.077751][T18492] security_bprm_check+0x69/0xb0 [ 993.082673][T18492] search_binary_handler+0x77/0x570 [ 993.087853][T18492] ? kasan_check_read+0x11/0x20 [ 993.092687][T18492] __do_execve_file.isra.0+0x1394/0x23f0 [ 993.098303][T18492] ? copy_strings_kernel+0x110/0x110 [ 993.103569][T18492] ? strncpy_from_user+0x2a8/0x380 [ 993.108664][T18492] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.114884][T18492] __x64_sys_execveat+0xed/0x130 [ 993.119806][T18492] do_syscall_64+0x103/0x610 [ 993.124380][T18492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.130253][T18492] RIP: 0033:0x458da9 [ 993.145344][T18492] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.164937][T18492] RSP: 002b:00007f5bccc4ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 993.173334][T18492] RAX: ffffffffffffffda RBX: 00007f5bccc4ec90 RCX: 0000000000458da9 [ 993.181286][T18492] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 993.189242][T18492] RBP: 000000000073bfa0 R08: 0000000000001000 R09: 0000000000000000 [ 993.197196][T18492] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bccc4f6d4 [ 993.205147][T18492] R13: 00000000004bf3b0 R14: 00000000004d05f0 R15: 0000000000000004 [ 993.214591][T18492] Kernel Offset: disabled [ 993.218920][T18492] Rebooting in 86400 seconds..